This page documents production updates to Config Connector. Check this page for announcements about new or updated features, bug fixes, known issues, and deprecated functionality. These release notes apply to the manual installation of Config Connector. Managed versions of (Config Connector add-on and Config Controller) might receive these updates at a later date. You can see the latest product updates for all of Google Cloud on the [Google Cloud](https://docs.cloud.google.com/release-notes) page, browse and filter all release notes in the [Google Cloud console](https://console.cloud.google.com/release-notes), or programmatically access release notes in [BigQuery](https://console.cloud.google.com/bigquery?p=bigquery-public-data&d=google_cloud_release_notes&t=release_notes&page=table). To get the latest product updates delivered to you, add the URL of this page to your [feed reader](https://wikipedia.org/wiki/Comparison_of_feed_aggregators), or add the [feed URL](https://docs.cloud.google.com/feeds/configconnector-release-notes.xml) directly. ## October 27, 2026 Announcement Config Connector version 1.160.0 is now available. Feature New Alpha Resources (Direct Reconciler): - `CCInsightsAnalysisRule` - Manage [Customer Experience Insights analysis rules](https://docs.cloud.google.com/gemini-enterprise-cx/insights/reference/rest/v1/projects.locations.analysisRules) to define rules for analyzing conversational data. - `ConfigDeploymentGroup` - Manage [Infrastructure Manager deployment groups](https://docs.cloud.google.com/infrastructure-manager/docs/reference/rest/v1/projects.locations.deploymentGroups) to orchestrate and manage deployments collectively. - `DataLineageProcess` - Manage [Knowledge Catalog data lineage processes](https://docs.cloud.google.com/knowledge-catalog/docs/reference/data-lineage/rest/v1/projects.locations.processes) to track data origin and movement. - `DataplexDataProduct` - Manage [Knowledge Catalog data products](https://docs.cloud.google.com/knowledge-catalog/docs/reference/rest/v1/projects.locations.dataProducts) to package and share data assets across an enterprise. - `DialogflowKnowledgeBase` - Manage [Dialogflow ES knowledge bases](https://docs.cloud.google.com/dialogflow/es/docs/reference/rest/v2/projects.locations.knowledgeBases) to provide FAQs and articles for agent answers. - `DiscoveryEngineSchema` - Manage [Agent Search schemas](https://docs.cloud.google.com/generative-ai-app-builder/docs/reference/rest/v1/projects.locations.collections.dataStores.schemas) to define document structures and schemas for data stores. - `DiscoveryEngineSession` - Manage [Agent Search sessions](https://docs.cloud.google.com/generative-ai-app-builder/docs/reference/rest/v1/projects.locations.collections.dataStores.sessions) to maintain conversation context and history for search and recommendations. - `DiscoveryEngineSitemap` - Manage [Agent Search sitemaps](https://docs.cloud.google.com/generative-ai-app-builder/docs/reference/rest/v1/projects.locations.collections.dataStores.siteSearchEngine.sitemaps) to crawl web pages for search data stores. - `ManagedKafkaConnectCluster` - Manage [Managed Service for Apache Kafka Connect clusters](https://docs.cloud.google.com/managed-service-for-apache-kafka/docs/reference/rest/v1/projects.locations.connectClusters) to run connectors that integrate Apache Kafka with Google Cloud and external systems. - `MigrationCenterPreferenceSet` - Manage [Migration Center preference sets](https://docs.cloud.google.com/migration-center/docs/reference/rest/v1/projects.locations.preferenceSets) to specify migration preferences and target cloud architecture assumptions. - `MigrationCenterSource` - Manage [Migration Center sources](https://docs.cloud.google.com/migration-center/docs/reference/rest/v1/projects.locations.sources) to configure data sources for importing asset data. - `NetAppActiveDirectory` - Manage [NetApp Volumes Active Directory configurations](https://docs.cloud.google.com/netapp/volumes/docs/reference/rest/v1/projects.locations.activeDirectories) to enable SMB and NFS domain-joined authentication. - `NetAppHostGroup` - Manage [NetApp Volumes host groups](https://docs.cloud.google.com/netapp/volumes/docs/reference/rest/v1/projects.locations.hostGroups) to group client hosts for volume access. - `NetworkConnectivityTransport` - Manage [Network Connectivity transports](https://docs.cloud.google.com/network-connectivity/docs/reference/networkconnectivity/rest/v1/projects.locations.transports) for connecting network endpoints. - `NetworkSecurityMirroringEndpointGroupAssociation` - Manage [Network Security Integration mirroring endpoint group associations](https://docs.cloud.google.com/network-security-integration/docs/reference/rest/v1/projects.locations.mirroringEndpointGroupAssociations) to associate packet mirroring endpoint groups with Virtual Private Cloud (VPC) networks. - `NetworkServicesLBEdgeExtension` - Manage [Service Extensions load balancing edge extensions](https://docs.cloud.google.com/service-extensions/docs/reference/rest/v1/projects.locations.lbEdgeExtensions) to customize Cloud CDN and edge proxy traffic processing. - `NetworkServicesLBTrafficExtension` - Manage [Service Extensions load balancing traffic extensions](https://docs.cloud.google.com/service-extensions/docs/reference/rest/v1/projects.locations.lbTrafficExtensions) to customize request and response processing in Application Load Balancers. - `NetworkServicesServiceLBPolicy` - Manage [Cloud Service Mesh service load balancing policies](https://docs.cloud.google.com/service-mesh/docs/reference/network-services/rest/v1/projects.locations.serviceLbPolicies) to configure fine-grained traffic distribution across backend services. - `SaaSServiceMgmtUnit` - Manage [App Lifecycle Manager units](https://docs.cloud.google.com/app-lifecycle-manager/reference/rest/v1/projects.locations.units) to manage SaaS deployment units. - `StorageInsightsReportConfig` - Manage [Storage Insights report configurations](https://docs.cloud.google.com/storage/docs/insights/reference/rest/v1/projects.locations.reportConfigs) to generate inventory and audit reports for Cloud Storage buckets. - `WorkloadManagerEvaluation` - Manage [Workload Manager evaluations](https://docs.cloud.google.com/workload-manager/docs/reference/rest/v1/projects.locations.evaluations) to scan and evaluate workloads against best-practice rules. Feature New Fields: - [`BigtableTable`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/bigtable/bigtabletable) - Added support for `spec.columnFamily[].type`. - [`MemorystoreInstance`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/memorystore/memorystoreinstance) - Added support for `spec.gcsSource`. - [`MonitoringDashboard`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/monitoring/monitoringdashboard) - Added support for `timeSeriesQuery.opsAnalyticsQuery` in dashboard widgets. Feature New Features: - Added support for a configurable maximum exponential backoff delay ceiling and retry halting for direct controllers by using the `cnrm.cloud.google.com/backoff-max-delay-in-seconds` annotation. - Updated resource actuation to halt delete operations when the `cnrm.cloud.google.com/actuation-mode` annotation is set to `Paused` on an individual resource. Change Reconciliation Improvements: Added support for direct reconciliation to more resources, with opt-in behavior. The API is unchanged. To use the direct reconciler, add the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation to the corresponding Config Connector object. The following resources now have direct reconciliation support: - [`ComputeNetworkFirewallPolicy`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/compute/computenetworkfirewallpolicy) - Added support for direct reconciliation (opt-in). - [`ComputeProjectMetadata`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/compute/computeprojectmetadata) - Added support for direct reconciliation (opt-in). - `FirebaseHostingSite` - Added support for direct reconciliation (opt-in). - `NetworkServicesEdgeCacheService` - Added support for direct reconciliation (opt-in). - `OSLoginSSHPublicKey` - Added support for direct reconciliation (opt-in). - [`SQLSSLCert`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/sql/sqlsslcert) - Added support for direct reconciliation (opt-in). Fixed Bug Fixes: - [`AlloyDBCluster`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/alloydb/alloydbcluster) ([#13963](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/13963)) - Fixed false-positive diffs on `labels`, `initialUser`, and `network` during takeover and re-reconciliation in the direct controller. - [`ArtifactRegistryRepository`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/artifactregistry/artifactregistryrepository) ([#13873](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/13873)) - Fixed migration diffs on `cleanupPolicies` and `cleanupPolicyDryRun` when switching from the Terraform-based controller to the direct controller. - [`ComputeRouterNAT`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/compute/computerouternat) ([#13787](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/13787)) - Fixed creation default and deletion behavior mismatches between the direct controller and the legacy controller. - [`ComputeSecurityPolicy`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/compute/computesecuritypolicy) ([#12775](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/12775)) - Fixed an issue where setting `rateLimitOptions.enforceOnKeyConfigs` failed with an API error unless `enforceOnKey: ""` was explicitly specified. - [`EssentialContactsContact`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/essentialcontacts/essentialcontactscontact) ([#13845](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/13845)) - Fixed `409 ALREADY_EXISTS` reconciliation errors by automatically acquiring an existing contact by email. - [`MemorystoreInstance`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/memorystore/memorystoreinstance) ([#13962](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/13962)) - Fixed unwanted drift when `maintenanceVersion` is omitted from the resource configuration by leaving the field unmanaged. ## October 13, 2026 Announcement Config Connector version 1.159.0 is now available. Feature New Alpha Resources (Direct Reconciler): - `AIPlatformReasoningEngine` - Manage [Gemini Enterprise Agent Platform reasoning engines](https://docs.cloud.google.com/gemini-enterprise-agent-platform/reference/rest/v1/projects.locations.reasoningEngines) to deploy and run customized reasoning applications. - `CloudDeployCustomTargetType` - Manage [Cloud Deploy custom target types](https://docs.cloud.google.com/deploy/docs/api/reference/rest/v1/projects.locations.customTargetTypes) to define custom deployment targets and rendering actions. - `EventarcPipeline` - Manage [Eventarc pipelines](https://docs.cloud.google.com/eventarc/docs/reference/rest/v1/projects.locations.pipelines) to transform and route events across Google Cloud services. - `LiveStreamChannel` - Manage [Live Stream channels](https://docs.cloud.google.com/livestream/docs/reference/rest/v1/projects.locations.channels) to ingest, encode, and distribute live video streams. - `LiveStreamInput` - Manage [Live Stream inputs](https://docs.cloud.google.com/livestream/docs/reference/rest/v1/projects.locations.inputs) to configure video ingestion endpoints. - `MapManagementStyleConfig` - Manage [Map Management API style configurations](https://developers.google.com/maps/documentation/mapmanagement/reference/rest/v2/projects.styleConfigs) to define custom map styles. - `NetworkSecurityDNSThreatDetector` - Manage [Network Security DNS threat detectors](https://docs.cloud.google.com/dns/docs/reference/dns-armor/rest/v1/projects.locations.dnsThreatDetectors) to monitor and mitigate DNS-based threats. Feature New Fields: - [`ArtifactRegistryRepository`](https://cloud.google.com/config-connector/docs/reference/resource-docs/artifactregistry/artifactregistryrepository) - Added support for `spec.remoteRepositoryConfig.commonRepository`. - [`ComposerEnvironment`](https://cloud.google.com/config-connector/docs/reference/resource-docs/composer/composerenvironment) - Added support for updating `spec.config.workloadsConfig.dagProcessor` in Cloud Composer 3 environments. - [`ContainerCluster`](https://cloud.google.com/config-connector/docs/reference/resource-docs/container/containercluster) - Added support for `spec.privilegedAdmissionConfig` to configure privileged admission in Autopilot clusters. - [`SQLInstance`](https://cloud.google.com/config-connector/docs/reference/resource-docs/sql/sqlinstance) - Added support for disaster recovery observed state fields under `status.observedState.replicationCluster` (`failoverDRReplicaName`, `drReplica`, `psaWriteEndpoint`) and `status.observedState.masterInstanceName`. Feature New Features: - Added support for Cloud SQL Enterprise Plus edition disaster recovery (DR) pair setup and drift suppression for `SQLInstance` by using the `cnrm.cloud.google.com/sqlinstance-advanced-dr: "enabled"` annotation. - Manager Pods now restart automatically when `resourceSettings` changes in the operator configuration. - Added [a guide for managing Config Connector by using GitOps tools](https://github.com/GoogleCloudPlatform/k8s-config-connector/blob/master/docs/guides/gitops-argocd.md) (such as Argo CD). Fixed Bug Fixes: - [`BigQueryDataset`](https://cloud.google.com/config-connector/docs/reference/resource-docs/bigquery/bigquerydataset) ([#13352](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/13352)) - Fixed false-positive diffs for access entries and avoided redundant `PATCH` requests when the resource is already up to date. - [`ComputeRouterNAT`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computerouternat) ([#13472](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/13472)) - Fixed false drift and steady-state reconciliation issues during direct controller takeover. - [`MonitoringDashboard`](https://cloud.google.com/config-connector/docs/reference/resource-docs/monitoring/monitoringdashboard) ([#13574](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/13574)) - Fixed reconciliation errors caused by unrecognized enum values by migrating the direct controller to the Google REST client. ## October 06, 2026 Announcement Config Connector version 1.158.0 is now available. Feature New Alpha Resources (Direct Reconciler): - `AgentRegistryBinding` - Manage [Agent Registry bindings](https://docs.cloud.google.com/agent-registry/reference/rest/v1/projects.locations.bindings) to connect agent tools and authentication configurations. - `AIPlatformPersistentResource` - Manage [Gemini Enterprise Agent Platform persistent resources](https://docs.cloud.google.com/gemini-enterprise-agent-platform/reference/rest/v1/projects.locations.persistentResources) for cluster computing and training jobs. - `AssuredWorkloadsWorkload` - Manage [Assured Workloads](https://cloud.google.com/assured-workloads/docs/reference/rest/v1/organizations.locations.workloads) to enforce security and compliance controls for regulated workloads. - `BigtableSchemaBundle` - Manage [Bigtable schema bundles](https://cloud.google.com/bigtable/docs/reference/admin/rest/v2/projects.instances.tables.schemaBundles) for storing protocol buffer (protobuf) schemas in Bigtable. - `CloudNumberRegistryRegistryBook` - Manage [Cloud Number Registry registry books](https://docs.cloud.google.com/number-registry/reference/rest/v1alpha/projects.locations.registryBooks) to organize IP address management (IPAM) information and discovered IP address ranges. - `EventarcMessageBus` - Manage [Eventarc message buses](https://cloud.google.com/eventarc/docs/reference/rest/v1/projects.locations.messageBuses) to route events from publishers to subscribers. - `ModelArmorFloorSetting` - Manage [Model Armor floor settings](https://docs.cloud.google.com/model-armor/reference/rest/v1/FloorSetting) at project, folder, or organization scope to enforce baseline safety and security filters for LLMs. Feature New Fields: - [`BackupDRBackupPlanAssociation`](https://cloud.google.com/config-connector/docs/reference/resource-docs/backupdr/backupdrbackupplanassociation) - Added `spec.resource.sqlInstanceRef` field to support backing up Cloud SQL instances. - `ComputeNetworkFirewallPolicyRule` - Added `spec.match.srcNetworkContext` and `spec.match.destNetworkContext` fields. - [`ComputeRegionNetworkEndpointGroup`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computeregionnetworkendpointgroup) - Added `INTERNET_IP_PORT`, `INTERNET_FQDN_PORT`, and `GCE_VM_IP_PORTMAP` values for `spec.networkEndpointType`. - [`RedisCluster`](https://cloud.google.com/config-connector/docs/reference/resource-docs/redis/rediscluster) - Added `spec.clusterEndpoints` and `status.clusterEndpoints` fields. - Added `spec.gcsSource` field. - Added `spec.managedBackupSource` field. - [`SQLInstance`](https://cloud.google.com/config-connector/docs/reference/resource-docs/sql/sqlinstance) - Added `spec.settings.databaseReplicationEnabled` field. Feature New Features: - Added support for pausing and unpausing actuation at the individual resource level by using the `cnrm.cloud.google.com/actuation-mode` annotation. Change Reconciliation Improvements: Added support for direct reconciliation to more resources, with opt-in behavior. The API is unchanged. To use the direct reconciler, add the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation to the corresponding Config Connector object. The following resources now have direct reconciliation support: - [`FilestoreInstance`](https://cloud.google.com/config-connector/docs/reference/resource-docs/filestore/filestoreinstance) - Added support for direct reconciliation (opt-in). Fixed Bug Fixes: - [`BigQueryDataset`](https://cloud.google.com/config-connector/docs/reference/resource-docs/bigquery/bigquerydataset) ([#12383](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/12383)) - Fixed a reconciliation failure in projects with a project ID that contains a colon (such as domain-scoped projects `example.com:my-project`), where creation previously failed with an invalid ID format error and `resourceID` and `selfLink` were not populated. - [`ComposerEnvironment`](https://cloud.google.com/config-connector/docs/reference/resource-docs/composer/composerenvironment) ([#12795](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/12795)) - Fixed infinite reconciliation loops, false drift, and HTTP 400 errors when using empty map fields (`envVariables: {}`, `labels: {}`), partial `workloadsConfig` blocks, or disabling `scheduledSnapshotsConfig`. - [`ComputeRouterNAT`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computerouternat) ([#12813](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/12813)) - Fixed reference validation and resolution in the direct controller so that `spec.routerRef` accepts both short router names and canonical long paths. - Removed empty `status.observedState` fields from `v1alpha1` CRDs to align with Kubernetes structural schema requirements ([#12627](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/12627)). ## September 23, 2026 Announcement Config Connector version 1.157.0 is now available. Feature New Alpha Resources (Direct Reconciler): - `AIPlatformModel` - Manage [Vertex AI models](https://cloud.google.com/vertex-ai/docs/model-registry/introduction). - `APIHubExternalAPI` - Manage [API Hub external APIs](https://cloud.google.com/apigee/docs/reference/apis/apihub/rest/v1/projects.locations.externalApis). - `NotebookInstanceV2` - Manage [Agent Platform Workbench instance](https://docs.cloud.google.com/gemini-enterprise-agent-platform/notebooks/workbench/reference/rest/v2/projects.locations.instances). - `RedisClusterEndpoint` - Manage [Memorystore for Redis Cluster endpoints](https://cloud.google.com/memorystore/docs/cluster/reference/rest/v1/projects.locations.clusters#ClusterEndpoint). Feature New Fields: - `NetworkServicesEdgeCacheService` - Added `routeMethods` and `compressionMode` support. Fixed Bug Fixes: - [`NetworkConnectivityInternalRange`](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/12615) - Fixed continuous reconciliation loop and 400 error on `NetworkConnectivityInternalRange` when auto-allocation fields are set. Change Other: - **BeyondCorpClientGateway**: Removed support for the deprecated BeyondCorp Enterprise client connector. ## September 08, 2026 Announcement Config Connector version 1.156.0 is now available. Feature New Alpha Resources (Direct Reconciler): - `CCInsightsQAScorecard` - Manage [Contact Center Insights QA scorecards](https://docs.cloud.google.com/gemini-enterprise-cx/insights/reference/rest/v1/projects.locations.qaScorecards) to manage and evaluate agent performance. - `ContentWarehouseSynonymSet` - Manage [Document AI Warehouse Synonym Sets](https://docs.cloud.google.com/document-warehouse/docs/reference/rest/v1/projects.locations.synonymSets) to manage custom synonym groups for searches. - `DevConnectAccountConnector` - Manage [Developer Connect Account Connectors](https://cloud.google.com/developer-connect/docs) to connect GKE clusters to developer systems. - `DiscoveryEngineEngine` - Manage [Discovery Engine search engines](https://cloud.google.com/generative-ai-app-builder/docs) to power search experiences. - `DiscoveryEngineServingConfig` - Manage [Discovery Engine serving configurations](https://cloud.google.com/generative-ai-app-builder/docs) to control search, recommendation, and listing features. - `GKEHubFleet` - Manage [GKE Hub Fleets](https://cloud.google.com/kubernetes-engine/fleet-management/docs) to logically group and manage clusters. - `ModelArmorTemplate` - Manage [Model Armor templates](https://docs.cloud.google.com/model-armor/manage-templates) to define safety and security policies for large language models. - `NetworkSecurityAuthzPolicy` - Manage [Network Security Authorization Policies](https://cloud.google.com/service-mesh/docs/tutorials/authz) to authorize traffic. - `RapidMigrationAssessmentCollector` - Manage [Rapid Migration Assessment collectors](https://cloud.google.com/migration-center/docs) to gather environment discovery data for cloud migration. - `SecurityCenterManagementEventThreatDetectionCustomModule` - Manage [Security Command Center event threat detection custom modules](https://cloud.google.com/security-command-center/docs) to customize threat detection. - `StorageInsightsDatasetConfig` - Manage [Cloud Storage Insights dataset configurations](https://docs.cloud.google.com/storage/docs/insights/datasets) to automatically inventory and analyze storage datasets. - `VectorSearchCollection` - Manage [Vertex AI Vector Search collections](https://docs.cloud.google.com/vertex-ai/docs/vector-search/overview) to manage similarity search indexes. Feature New Fields: - [`BigtableTable`](https://cloud.google.com/config-connector/docs/reference/resource-docs/bigtable/bigtabletable) - Added `spec.automatedBackupPolicy.locations` field. - [`ContainerCluster`](https://cloud.google.com/config-connector/docs/reference/resource-docs/container/containercluster) - Added `spec.nodeConfig.swapConfig` field. - [`ContainerNodePool`](https://cloud.google.com/config-connector/docs/reference/resource-docs/container/containernodepool) - Added `spec.nodeConfig.swapConfig` field. - [`DataprocCluster`](https://cloud.google.com/config-connector/docs/reference/resource-docs/dataproc/dataproccluster) - Added `spec.secondaryWorkerConfig.instanceFlexibilityPolicy` field. - `NetworkSecurityFirewallEndpoint` - Added `spec.organizationRef` field to support organizing resources at the organization level, and made `spec.projectRef` optional. Feature New Features: - **Optional NAT IP Allocate Option** : Made `natIpAllocateOption` an optional field in `ComputeRouterNat` to support dynamic allocation. - **Preview Summary CLI Improvements**: Added namespace and current status to the preview summary report. Change Reconciliation Improvements: We have added support for direct reconciliation to more resources, with opt-in behavior. The API is unchanged. To use the direct reconciler, add the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation to the corresponding Config Connector object. The following resources now have direct reconciliation support: - `VertexAITensorboard` - Support direct reconciliation (opt-in). ## August 20, 2026 Announcement Config Connector version 1.155.1 is now available. Feature New Beta Resources (Direct Reconciler): - `DiscoveryEngineLicenseConfig` - Manage [Discovery Engine license configurations](https://cloud.google.com/generative-ai-app-builder/docs) to manage application licenses. - `StorageManagedFolder` - Manage [Google Cloud Storage managed folders](https://cloud.google.com/storage/docs/managed-folders) to apply granular access control policies to subsets of storage objects. - `VertexAITensorboardExperiment` - Manage [Vertex AI Tensorboard experiments](https://cloud.google.com/gemini-enterprise-agent-platform/machine-learning/experiments/tensorboard-introduction) to organize and track runs. Feature New Fields: - [`BigtableTable`](https://cloud.google.com/config-connector/docs/reference/resource-docs/bigtable/bigtabletable) - Added `spec.automatedBackupPolicy` field. - [`CertificateManagerDNSAuthorization`](https://cloud.google.com/config-connector/docs/reference/resource-docs/certificatemanager/certificatemanagerdnsauthorization) - Added `spec.type` field. - [`ComputeForwardingRule`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computeforwardingrule) - Added `spec.target.redisClusterServiceAttachment` field. - [`ComputeURLMap`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computeurlmap) - Added `spec.tests[].expectedOutputURL` field. - Added `spec.tests[].expectedRedirectResponseCode` field. - [`ContainerCluster`](https://cloud.google.com/config-connector/docs/reference/resource-docs/container/containercluster) - Added `spec.nodeConfig.kubeletConfig.imageGcLowThresholdPercent` field. - Added `spec.nodeConfig.kubeletConfig.imageGcHighThresholdPercent` field. - Added `spec.nodeConfig.kubeletConfig.imageMinimumGcAge` field. - Added `spec.nodeConfig.kubeletConfig.imageMaximumGcAge` field. - Added `spec.nodeConfig.containerdConfig` field. - Added `spec.inTransitEncryptionConfig` field. - Added `spec.disableL4LbFirewallReconciliation` field. - Added `spec.nodeConfig.resourceManagerTags` field. - Added `spec.nodePoolAutoConfig.resourceManagerTags` field. - [`ContainerNodePool`](https://cloud.google.com/config-connector/docs/reference/resource-docs/container/containernodepool) - Added `spec.nodeConfig.kubeletConfig.imageGcLowThresholdPercent` field. - Added `spec.nodeConfig.kubeletConfig.imageGcHighThresholdPercent` field. - Added `spec.nodeConfig.kubeletConfig.imageMinimumGcAge` field. - Added `spec.nodeConfig.kubeletConfig.imageMaximumGcAge` field. - Added `spec.nodeConfig.containerdConfig` field. - Added `spec.nodeConfig.resourceManagerTags` field. - [`StorageBucket`](https://cloud.google.com/config-connector/docs/reference/resource-docs/storage/storagebucket) - Added `spec.autoclass.terminalStorageClass` field. - Added `status.observedState.storageClass` field. Feature New Features: - **Configurable metrics server address**: Made the manager's built-in metrics server bind address configurable. - **Brownfield state comparison**: Added a generic helper function to compare desired and actual states in brownfield resources, improving reconciliation reliability. - **Irregular shortname pluralization**: Added support for irregular shortname pluralization of "corpus" to "corpora". Change Reconciliation Improvements: We have added support for direct reconciliation to more resources, with opt-in behavior. The API is unchanged. To use the direct reconciler, add the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation to the corresponding Config Connector object. This release note was edited on October 2, 2026. - [`NetworkServicesHTTPRoute`](https://cloud.google.com/config-connector/docs/reference/resource-docs/networkservices/networkserviceshttproute) - Support direct reconciliation (opt-in). Fixed Bug Fixes: - [`ComposerEnvironment`](https://cloud.google.com/config-connector/docs/reference/resource-docs/composer/composerenvironment) - Improved reconciliation, diffing, and update logic for `ComposerEnvironment` in the direct reconciler. ([GitHub PR #12364](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/12365)) - Skip the update of a ComposerEnvironment when the state of the underlying Google Cloud Composer environment is not RUNNING. ([GitHub PR #12365](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/12365)) - [`ComputeReservation`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computereservation) - Ignore diff for `specificReservation.inUseCount` to prevent infinite/unwanted reconciliations. - [`RedisInstance`](https://cloud.google.com/config-connector/docs/reference/resource-docs/redis/redisinstance) - Marked `MaintenanceSchedule` field as output only to align with GCP's behavior. - [`SQLInstance`](https://cloud.google.com/config-connector/docs/reference/resource-docs/sql/sqlinstance) - Fixed legacy fuzzer roundtrip mismatch for `PscAutoConnectionPolicyEnabled`. - `CloudFunctions2Function` - Declared source fields mutable-but-unreadable to avoid spurious diffs. ## July 30, 2026 Announcement Config Connector version 1.154.1 is now available. Feature New Alpha Resources (Direct Reconciler): - `ApigeeApiProduct` - Manage [Apigee API products](https://cloud.google.com/apigee/docs/api-platform/publish/what-api-product) to bundle APIs and make them available to developers. - `ApigeeRegistryApi` - Manage [Apigee Registry APIs](https://cloud.google.com/apigee/docs/apihub/what-is-api-hub) to catalog and manage APIs. - `ApigeeRegistryArtifact` - Manage [Apigee Registry artifacts](https://cloud.google.com/apigee/docs/apihub/what-is-api-hub) associated with APIs, versions, or specs. - `APIHubExternalAPI` - Manage [API Hub external APIs](https://cloud.google.com/apigee/docs/apihub/what-is-api-hub) to track APIs hosted outside of Google Cloud. - `APIHubInstance` - Manage [API Hub instances](https://cloud.google.com/apigee/docs/apihub/what-is-api-hub) to enable enterprise API management. - `AppOptimizeReport` - Manage [App Hub Optimize reports](https://cloud.google.com/app-hub/docs/overview). - `ArtifactRegistryVPCSCConfig` - Manage [Artifact Registry VPC Service Controls configurations](https://cloud.google.com/artifact-registry/docs/securing-with-vpc-sc) to secure repository access. - `BigQueryMigrationMigrationWorkflow` - Manage [BigQuery Migration workflows](https://cloud.google.com/bigquery/docs/migration-intro) to orchestrate data migration to BigQuery. - `BlockchainNodeEngineBlockchainNode` - Manage [Blockchain Node Engine blockchain nodes](https://cloud.google.com/blockchain-node-engine/docs) to deploy and manage dedicated blockchain nodes. - `CCInsightsConversation` - Manage [Contact Center Insights conversations](https://docs.cloud.google.com/gemini-enterprise-cx/insights/reference/rest/v1/projects.locations.conversations) to analyze customer interactions. - `CCInsightsIssueModel` - Manage [Contact Center Insights issue models](https://docs.cloud.google.com/gemini-enterprise-cx/insights/reference/rest/v1/projects.locations.issueModels) to categorize conversation topics. - `CCInsightsPhraseMatcher` - Manage [Contact Center Insights phrase matchers](https://docs.cloud.google.com/gemini-enterprise-cx/insights/reference/rest/v1/projects.locations.phraseMatchers) to detect specific phrases in conversations. - `CESApp` - Manage [Consumer Experience Suite (CES) applications](https://docs.cloud.google.com/gemini-enterprise-cx/cx-agent-studio). - `CloudBuildConnection` - Manage [Cloud Build 2nd gen connections](https://cloud.google.com/build/docs/automating-builds/github/connect-repo-github) to integrate external source repositories. - `CloudSecurityComplianceFramework` - Manage [Cloud Security Compliance frameworks](https://cloud.google.com/security-command-center/docs/compliance-manager-overview). - `ConnectorsConnection` - Manage [Integration Connectors connections](https://cloud.google.com/integration-connectors/docs) to connect to SaaS, databases, and enterprise systems. - `ContentWarehouseDocument` - Manage [Document AI Warehouse documents](https://docs.cloud.google.com/document-warehouse/docs/reference/rest/v1/projects.locations.documents). - `ContentWarehouseRuleSet` - Manage [Document AI Warehouse rule sets](https://docs.cloud.google.com/document-warehouse/docs/reference/rest/v1/projects.locations.ruleSets) to enforce document policies. - `ContentWarehouseSynonymSet` - Manage [Document AI Warehouse synonym sets](https://docs.cloud.google.com/document-warehouse/docs/reference/rest/v1/projects.locations.synonymSets) to expand search queries. - `DatabaseMigrationPrivateConnection` - Manage [Database Migration Service private connections](https://cloud.google.com/database-migration/docs) to securely connect source databases to Google Cloud. - `DataformFolder` - Manage [Dataform folders](https://cloud.google.com/dataform/docs) in Dataform repositories. - `DataformTeamFolder` - Manage [Dataform team folders](https://cloud.google.com/dataform/docs) to organize repository assets. - `DataLabelingDataset` - Manage [AI Platform Data Labeling datasets](https://cloud.google.com/ai-platform/data-labeling/docs) for annotating training data. - `DataLabelingEvaluationJob` - Manage [AI Platform Data Labeling evaluation jobs](https://cloud.google.com/ai-platform/data-labeling/docs) to assess model quality. - `DataLineageProcess` - Manage [Dataplex Data Lineage processes](https://docs.cloud.google.com/knowledge-catalog/docs/about-data-lineage) to track data origin and movement. - `DataplexAspectType` - Manage [Dataplex aspect types](https://cloud.google.com/dataplex/docs) to define metadata schemas. - `DataplexDataAttributeBinding` - Manage [Dataplex data attribute bindings](https://cloud.google.com/dataplex/docs) to map security and governance attributes to assets. - `DataplexDataScan` - Manage [Dataplex data scans](https://cloud.google.com/bigquery/docs/data-profile-scan) for data profiling and quality. - `DataplexDataTaxonomy` - Manage [Dataplex data taxonomies](https://cloud.google.com/dataplex/docs) to organize business metadata. - `DataplexGlossary` - Manage [Dataplex business glossaries](https://cloud.google.com/dataplex/docs) for consistent vocabulary. - `DataplexMetadataJob` - Manage [Dataplex metadata jobs](https://cloud.google.com/dataplex/docs) for metadata extraction. - `DevConnectConnection` - Manage [Developer Connect connections](https://cloud.google.com/developer-connect/docs) to securely link third-party Git hosts. - `DialogflowConversationDataset` - Manage [Dialogflow conversation datasets](https://cloud.google.com/dialogflow/cx/docs) for agent training. - `DialogflowSecuritySettings` - Manage [Dialogflow security settings](https://cloud.google.com/dialogflow/cx/docs) for data redaction and access control. - `DialogflowSipTrunk` - Manage [Dialogflow SIP trunks](https://cloud.google.com/dialogflow/cx/docs) for telecom integration. - `DiscoveryEngineControl` - Manage [Discovery Engine controls](https://cloud.google.com/generative-ai-app-builder/docs) to boost or filter search results. - `DiscoveryEngineSampleQuerySet` - Manage [Discovery Engine sample query sets](https://cloud.google.com/generative-ai-app-builder/docs) to evaluate search performance. - `DLPConnection` - Manage [Sensitive Data Protection (DLP) connections](https://cloud.google.com/sensitive-data-protection/docs). - `DLPDiscoveryConfig` - Manage [Sensitive Data Protection (DLP) discovery configurations](https://cloud.google.com/sensitive-data-protection/docs) for profiling data assets. - `EventarcGoogleApiSource` - Manage [Eventarc Google API sources](https://cloud.google.com/eventarc/docs) to configure event routing. - `GeminiDataAnalyticsConversation` - Manage [Gemini Data Analytics conversations](https://cloud.google.com/gemini/docs). - `GKEBackupBackupChannel` - Manage [Backup for GKE backup channels](https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke). - `LiveStreamAsset` - Manage [Live Stream assets](https://cloud.google.com/livestream/docs) for processing live video. - `ManagedKafkaConnectCluster` - Manage [Apache Kafka for BigQuery connections](https://cloud.google.com/managed-kafka/docs). - `MigrationCenterGroup` - Manage [Migration Center groups](https://cloud.google.com/migration-center/docs) to organize assets for migration assessment. - `NetworkSecurityAddressGroup` - Manage [Network Security address groups](https://cloud.google.com/firewall/docs/address-groups-firewall-policies) to define reusable network criteria. - `NetworkSecurityAuthzPolicy` - Manage [Network Security authorization policies](https://cloud.google.com/secure-web-proxy/docs) to secure network paths. - `NetworkSecurityFirewallEndpoint` - Manage [Network Security firewall endpoints](https://cloud.google.com/firewall/docs/about-firewall-endpoints) for Cloud Firewall Plus threat inspection. - `NetworkSecurityFirewallEndpointAssociation` - Manage [Network Security firewall endpoint associations](https://cloud.google.com/firewall/docs/about-firewall-endpoints) to apply threat inspection to networks. - `NetworkSecurityGatewaySecurityPolicy` - Manage [Network Security gateway security policies](https://cloud.google.com/secure-web-proxy/docs) for Secure Web Proxy configurations. - `NetworkSecurityPartnerSSEGateway` - Manage [Network Security partner Secure Service Edge (SSE) gateways](https://cloud.google.com/secure-web-proxy/docs). - `NetworkSecurityPartnerSSERealm` - Manage [Network Security partner Secure Service Edge (SSE) realms](https://cloud.google.com/secure-web-proxy/docs). - `NetworkSecuritySecurityProfile` - Manage [Network Security security profiles](https://cloud.google.com/firewall/docs/about-security-profiles) to group threat prevention policies. - `NetworkSecurityTLSInspectionPolicy` - Manage [Network Security TLS inspection policies](https://cloud.google.com/secure-web-proxy/docs/tls-inspection-overview) to inspect encrypted traffic. - `NetworkServicesAuthzExtension` - Manage [Network Services authorization extensions](https://cloud.google.com/service-extensions/docs) to integrate third-party callouts. - `NotebooksSchedule` - Manage [Vertex AI Workbench schedules](https://cloud.google.com/vertex-ai/docs/workbench) to run automated notebooks. - `RedisClusterEndpoint` - Manage [Google Cloud Memorystore for Redis Cluster endpoints](https://cloud.google.com/memorystore/docs/cluster). - `RunWorkerPool` - Manage [Cloud Run worker pools](https://cloud.google.com/run/docs) for long-running non-HTTP workloads. - `SaasServiceMgmtRelease` - Manage [SaaS Service Management releases](https://cloud.google.com/service-infrastructure/docs). - `SQLAdminBackup` - Manage [Cloud SQL backups](https://cloud.google.com/sql/docs) (read-only/reference representation). - `StorageInsightsDatasetConfig` - Manage [Storage Insights dataset configurations](https://cloud.google.com/storage/docs/insights/using-storage-insights) to generate storage inventories. - `TestingDeviceSession` - Manage [Firebase Test Lab device sessions](https://firebase.google.com/docs/test-lab). - `TranslateAdaptiveMtDataset` - Manage [Cloud Translation adaptive machine translation datasets](https://cloud.google.com/translate/docs/advanced/adaptive-translation). - `VectorSearchCollection` - Manage [Vertex AI Vector Search collections](https://docs.cloud.google.com/vertex-ai/docs/vector-search/overview). - `VertexAIFeatureGroup` - Manage [Vertex AI Feature Store feature groups](https://cloud.google.com/vertex-ai/docs/featurestore/overview) to organize features. - `VertexAIFeatureOnlineStore` - Manage [Vertex AI Feature Store feature online stores](https://cloud.google.com/vertex-ai/docs/featurestore/overview) for low-latency serving. - `VertexAIPipelineJob` - Manage [Vertex AI pipeline jobs](https://cloud.google.com/vertex-ai/docs/pipelines) to run machine learning pipelines. - `VertexAISpecialistPool` - Manage [Vertex AI specialist pools](https://cloud.google.com/vertex-ai/docs) for human labeling. - `VertexAIStudy` - Manage [Vertex AI Vizier studies](https://cloud.google.com/vertex-ai/docs/vizier) for hyperparameter tuning. - `VertexAITuningJob` - Manage [Vertex AI model tuning jobs](https://cloud.google.com/vertex-ai/docs) for model customization. - `VideoStitcherCDNKey` - Manage [Video Stitcher CDN keys](https://cloud.google.com/video-stitcher/docs) to authenticate to external CDNs. - `VisionProduct` - Manage [Cloud Vision products](https://cloud.google.com/vision/product-search/docs) for product search cataloging. - `VMwareEnginePrivateConnection` - Manage [VMware Engine private connections](https://cloud.google.com/vmware-engine/docs) to connect private clouds to other services. Feature New Fields: - [`ComputeSubnetwork`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computesubnetwork) - Added `spec.reservedInternalRange` field. - `NetworkConnectivityInternalRange` - Added `spec.allocationOptions` field. - [`ComputeNetwork`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computenetwork) - Added `spec.networkProfile` field. - [`ComputeSecurityPolicy`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computesecuritypolicy) - Added `spec.region` field. - [`DNSRecordSet`](https://cloud.google.com/config-connector/docs/reference/resource-docs/dns/dnsrecordset) - Added support for routing policy `healthCheckRef` and `rrdatasRefs` fields. - [`ComputeAddress`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computeaddress) - Added `spec.ipCollection` field. - [`ComputeURLMap`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computeurlmap) - Added `spec.defaultCustomErrorResponsePolicy` field. - Added `spec.test[].expectedOutputUrl` and `spec.test[].expectedRedirectResponseCode` fields. - [`RedisCluster`](https://cloud.google.com/config-connector/docs/reference/resource-docs/redis/rediscluster) - Added `spec.crossClusterReplicationConfig` field. - [`MonitoringAlertPolicy`](https://cloud.google.com/config-connector/docs/reference/resource-docs/monitoring/monitoringalertpolicy) - Added `spec.conditions[].conditionSql` field (SQL Condition). - [`StorageBucket`](https://cloud.google.com/config-connector/docs/reference/resource-docs/storage/storagebucket) - Added `spec.ipFilter` field. - [`PubSubTopic`](https://cloud.google.com/config-connector/docs/reference/resource-docs/pubsub/pubsubtopic) - Added `spec.messageStoragePolicy.enforceInTransit` field. - [`ComputeRouterNAT`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computerouternat) - Added Private NAT feature support. Change Reconciliation Improvements: We have added support for direct reconciliation to more resources, with opt-in behaviour. The API is unchanged. To use the direct reconciler, add the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation to the corresponding Config Connector object. This release note was edited on October 2, 2026. - `BigQueryReservationCapacityCommitment` - [`BigtableGCPolicy`](https://cloud.google.com/config-connector/docs/reference/resource-docs/bigtable/bigtablegcpolicy) - [`BillingBudgetsBudget`](https://cloud.google.com/config-connector/docs/reference/resource-docs/billingbudgets/billingbudgetsbudget) - [`CertificateManagerCertificateMap`](https://cloud.google.com/config-connector/docs/reference/resource-docs/certificatemanager/certificatemanagercertificatemap) - [`CertificateManagerCertificateMapEntry`](https://cloud.google.com/config-connector/docs/reference/resource-docs/certificatemanager/certificatemanagercertificatemapentry) - [`ComputeAddress`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computeaddress) - `ComputeAutoscaler` - `ComputeBackendServiceSignedURLKey` - [`ComputeDisk`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computedisk) - `ComputeDiskResourcePolicyAttachment` - [`ComputeExternalVPNGateway`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computeexternalvpngateway) - [`ComputeFirewall`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computefirewall) - [`ComputeFirewallPolicy`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computefirewallpolicy) - [`ComputeHTTPHealthCheck`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computehttphealthcheck) - [`ComputeHTTPSHealthCheck`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computehttpshealthcheck) - [`ComputeImage`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computeimage) - [`ComputeInstance`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computeinstance) - [`ComputeInstanceGroup`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computeinstancegroup) - [`ComputeInstanceGroupManager`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computeinstancegroupmanager) - [`ComputeNetwork`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computenetwork) - [`ComputeNodeTemplate`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computenodetemplate) - [`ComputeRoute`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computeroute) - [`ComputeRouter`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computerouter) - [`ComputeRouterInterface`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computerouterinterface) - [`ComputeRouterNAT`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computerouternat) - [`ComputeSSLPolicy`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computesslpolicy) - [`ComputeSecurityPolicy`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computesecuritypolicy) - [`ComputeTargetHTTPSProxy`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computetargethttpsproxy) - [`ComputeURLMap`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computeurlmap) - [`DataflowJob`](https://cloud.google.com/config-connector/docs/reference/resource-docs/dataflow/dataflowjob) - [`DataprocAutoscalingPolicy`](https://cloud.google.com/config-connector/docs/reference/resource-docs/dataproc/dataprocautoscalingpolicy) - [`DataprocCluster`](https://cloud.google.com/config-connector/docs/reference/resource-docs/dataproc/dataproccluster) - `DNSResponsePolicy` - [`KMSCryptoKey`](https://cloud.google.com/config-connector/docs/reference/resource-docs/kms/kmscryptokey) - [`KMSKeyRing`](https://cloud.google.com/config-connector/docs/reference/resource-docs/kms/kmskeyring) - [`LoggingLogExclusion`](https://cloud.google.com/config-connector/docs/reference/resource-docs/logging/logginglogexclusion) - [`MonitoringAlertPolicy`](https://cloud.google.com/config-connector/docs/reference/resource-docs/monitoring/monitoringalertpolicy) - [`NetworkServicesGateway`](https://cloud.google.com/config-connector/docs/reference/resource-docs/networkservices/networkservicesgateway) - [`PrivateCACertificateAuthority`](https://cloud.google.com/config-connector/docs/reference/resource-docs/privateca/privatecacertificateauthority) - [`PrivateCACertificateTemplate`](https://cloud.google.com/config-connector/docs/reference/resource-docs/privateca/privatecacertificatetemplate) - [`PubSubSubscription`](https://cloud.google.com/config-connector/docs/reference/resource-docs/pubsub/pubsubsubscription) - [`RecaptchaEnterpriseKey`](https://cloud.google.com/config-connector/docs/reference/resource-docs/recaptchaenterprise/recaptchaenterprisekey) - [`RedisInstance`](https://cloud.google.com/config-connector/docs/reference/resource-docs/redis/redisinstance) - [`ServiceDirectoryEndpoint`](https://cloud.google.com/config-connector/docs/reference/resource-docs/servicedirectory/servicedirectoryendpoint) - [`ServiceDirectoryNamespace`](https://cloud.google.com/config-connector/docs/reference/resource-docs/servicedirectory/servicedirectorynamespace) - [`Service`](https://cloud.google.com/config-connector/docs/reference/resource-docs/serviceusage/service) - [`ServiceIdentity`](https://cloud.google.com/config-connector/docs/reference/resource-docs/serviceusage/serviceidentity) Fixed Bug Fixes: - [`ComposerEnvironment`](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/11001): Fix storageConfig.bucketRef mapping. - [`MemorystoreInstance`](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/11547): Prevent infinite reconciliation drift loop by aligning connections list length. - [`MemorystoreInstance`](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/11559): Prevent false drift and update attempts on unspecified immutable fields. - [`ComputeBackendService`](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/11800): Fix config-connector export tool to export `backend` field. - [`KMSAutokeyConfig`](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/9658): Clean up and improve autokey config identity and deletion resolution. - [`BigQuery`](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/9623): Fix perpetual diff on tables inheriting dataset encryption. - [`NotebooksInstance`](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/9810): Fix direct controller for NotebookInstance to resolve references. ## July 01, 2026 Announcement Config Connector version 1.153.0 is now available. Feature New Beta Resources (Direct Reconciler): - [`OrgPolicyPolicy`](https://cloud.google.com/config-connector/docs/reference/resource-docs/orgpolicy/orgpolicypolicy) - Manage [Organization Policies](https://cloud.google.com/resource-manager/docs/organization-policy/overview) to configure constraints across your Google Cloud resources. New Alpha Resources (Direct Reconciler): - `AIStreamsCluster` - Manage [AI Streams](https://cloud.google.com/ai-streams/docs) clusters to ingest and process real-time video streams. - `AutoMLDataset` - Manage [AutoML datasets](https://cloud.google.com/vertex-ai/docs/datasets/overview) in Vertex AI. - `CloudBatchResourceAllowance` - Manage [Batch resource allowances](https://cloud.google.com/batch/docs) to control resource usage and limits for batch jobs. - `BeyondCorpClientGateway` - Manage [BeyondCorp client gateways](https://cloud.google.com/beyondcorp/docs) to secure access to private applications. - `BigLakeDatabase` - Manage [BigLake databases](https://cloud.google.com/bigquery/docs/biglake-intro) for unified analytics over data lakes. - `BigtableAuthorizedView` - Manage [Bigtable authorized views](https://cloud.google.com/bigtable/docs/authorized-views) to control access to specific subsets of data in a table. - `BigtableBackup` - Manage [Bigtable backups](https://cloud.google.com/bigtable/docs/backups) to preserve table data. - `BillingAccount` - Manage [Billing accounts](https://cloud.google.com/billing/docs) (read-only/reference representation). - `CertificateManagerCertificateIssuanceConfig` - Manage [Certificate Manager certificate issuance configurations](https://cloud.google.com/certificate-manager/docs/issuance-configs) for automated certificate provisioning. - `CloudDeployDeployPolicy` - Manage [Cloud Deploy deploy policies](https://cloud.google.com/deploy/docs) to define deployment constraints and approvals. - `FirestoreBackupSchedule` - Manage [Firestore backup schedules](https://cloud.google.com/firestore/docs/backups) for automated database backups. - `IAMDenyPolicy` - Manage [IAM deny policies](https://cloud.google.com/iam/docs/deny-overview) to explicitly deny permissions. - `NetworkSecurityMirroringDeployment` - Manage [Network Security mirroring deployments](https://cloud.google.com/secure-web-proxy/docs) to mirror network traffic for inspection. - `NetworkSecurityMirroringEndpointGroup` - Manage [Network Security mirroring endpoint groups](https://cloud.google.com/secure-web-proxy/docs) to associate mirroring endpoints. - `SecurityCenterBigQueryExport` - Manage [Security Command Center BigQuery exports](https://cloud.google.com/security-command-center/docs/how-to-analyze-findings-in-bigquery) to automatically export findings to BigQuery. - `SecurityCenterMuteConfig` - Manage [Security Command Center mute configs](https://cloud.google.com/security-command-center/docs/how-to-mute-findings) to control finding visibility. - `VertexAIExampleStore` - Manage [Vertex AI example stores](https://cloud.google.com/vertex-ai/docs) for managing example data. Feature New Features: - Added the `cnrm.cloud.google.com/remove-default-node-pool-allow-node-config` annotation to the `ContainerCluster` resource. This annotation lets you set a field like `spec.nodeConfig` in a `ContainerCluster` resource, while still letting Config Connector remove the field after removing the default node pool. This annotation is intended for scenarios where defining `spec.nodeConfig` is necessary for organizational policy or system requirements during initial cluster provisioning. This release note was added on August 27, 2026. Feature New Fields: - [`ContainerCluster`](https://cloud.google.com/config-connector/docs/reference/resource-docs/container/containercluster) - Added `spec.confidentialNodes.confidentialInstanceType` and `spec.nodeConfig.confidentialNodes.confidentialInstanceType` fields. - [`ContainerNodePool`](https://cloud.google.com/config-connector/docs/reference/resource-docs/container/containernodepool) - Added `spec.nodeConfig.confidentialNodes.confidentialInstanceType` field. - Added `spec.nodeConfig.windowsNodeConfig` field. - [`RedisCluster`](https://cloud.google.com/config-connector/docs/reference/resource-docs/redis/rediscluster) - Added `spec.automatedBackupConfig` field. - Added `spec.crossClusterReplicationConfig` field. - Added `spec.kmsKeyRef` field. - Added `spec.maintenancePolicy` and `status.observedState.maintenancePolicy` fields. - Added `status.observedState.pscServiceAttachments` field. - [`MemorystoreInstance`](https://cloud.google.com/config-connector/docs/reference/resource-docs/memorystore/memorystoreinstance) - Added `spec.maintenancePolicy` and `status.observedState.maintenancePolicy` fields. - Added `spec.kmsKeyRef` field. - Added `status.observedState.encryptionInfo` field. Change Reconciliation Improvements: Added support for direct reconciliation to more resources, with opt-in behaviour. The API is unchanged. To use the direct reconciler, add the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation to the corresponding Config Connector object. This release note was edited on October 2, 2026. The following resources now have direct reconciliation support: - [`ArtifactRegistryRepository`](https://cloud.google.com/config-connector/docs/reference/resource-docs/artifactregistry/artifactregistryrepository) - [`CertificateManagerCertificate`](https://cloud.google.com/config-connector/docs/reference/resource-docs/certificatemanager/certificatemanagercertificate) - [`DNSManagedZone`](https://cloud.google.com/config-connector/docs/reference/resource-docs/dns/dnsmanagedzone) - [`DNSPolicy`](https://cloud.google.com/config-connector/docs/reference/resource-docs/dns/dnspolicies) - [`LoggingLogBucket`](https://cloud.google.com/config-connector/docs/reference/resource-docs/logging/logginglogbucket) - [`LoggingLogSink`](https://cloud.google.com/config-connector/docs/reference/resource-docs/logging/logginglogsink) - [`LoggingLogView`](https://cloud.google.com/config-connector/docs/reference/resource-docs/logging/logginglogview) - [`PubSubSchema`](https://cloud.google.com/config-connector/docs/reference/resource-docs/pubsub/pubsubschema) - [`PubSubTopic`](https://cloud.google.com/config-connector/docs/reference/resource-docs/pubsub/pubsubtopic) - [`ServiceDirectoryService`](https://cloud.google.com/config-connector/docs/reference/resource-docs/servicedirectory/servicedirectoryservice) Fixed Bug Fixes: - [#9114](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/9114): `ComposerEnvironment`: Support resource reference resolution and fix drift on private environment config. - [#10414](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/10414): `ComputeBackendService`: Prevent the automatic injection of `subsetting: { policy: "NONE" }` for regional backend services with `INTERNAL_SELF_MANAGED` load balancing scheme. - [#7222](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/7222): `DataprocCluster`: `userServiceAccountMapping` field in DataprocCluster resources is now mutable. - [#9594](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/9594): `DNSPolicy`: Fixes to DNSPolicy for real GCP integration. - [#10417](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/10417): `MemorystoreInstance`: Fix crossInstanceReplicationConfig field, allowing replication roles to be synced and updated correctly. - [#8828](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/8828): `NetworkSecurity`: Fix UpdateAuthorizationPolicy panic with empty updateMask. - [#7567](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/7567): `PrivilegedAccessManager`: Fix mock drift in PrivilegedAccessManager by correcting Delete LRO and array element retention. - [#9602](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/9602): `RedisCluster`: Fix permanent diff caused by automated backup configuration default value. ## June 23, 2026 Announcement Config Connector version 1.152.0 is now available. Feature New Fields: - [`ComputeReservation`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computereservation) - Added `spec.shareSettings` field. - [`ComputeForwardingRule`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computeforwardingrule) - Added `status.target` field. Change Reconciliation Improvements: Added support for direct reconciliation to more resources, with opt-in behaviour. The API is unchanged. To use the direct reconciler, add the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation to the corresponding Config Connector object. This release note was edited on October 2, 2026. The following resources now have direct reconciliation support: - [`ComputeReservation`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computereservation) - [`FirestoreIndex`](https://cloud.google.com/config-connector/docs/reference/resource-docs/firestore/firestoreindex) Fixed Bug Fixes: - [#8025](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/8025): `SQLInstance`: Fixed case sensitivity in `availabilityType`. - [#7743](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/7743): `Preview Tool`: Fixed crash on typed resources and hang on defaulting in preview mode. - [#7371](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/7371): `ComputeForwardingRule`: Fixed target field matching. - [#8479](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/8479): `ComputeFutureReservation`: Fixed validation logic for future reservation times. ## May 19, 2026 Announcement Config Connector version 1.151.0 is now available. Change New Alpha Resources (Direct Reconciler): - CloudDeployAutomation - ComputeFutureReservation - GKEHubMembershipBinding - GKEHubNamespace - GKEHubScopeRBACRoleBinding - NetworkServicesWasmPlugin - VertexAIDataLabelingJob Feature New Fields: - [`MemorystoreInstance`](https://cloud.google.com/config-connector/docs/reference/resource-docs/memorystore/memorystoreinstance) - Added `spec.automatedBackupConfig` field. - Added `spec.crossInstanceReplicationConfig` field. - Added `spec.maintenanceVersion` field. - Added `status.observedState.availableMaintenanceVersions` field. - Added `status.observedState.crossInstanceReplicationConfig` field. - Added `status.observedState.effectiveMaintenanceVersion` field. - Added `status.observedState.pscAttachmentDetails` field. Fixed - [`BigQueryDataTransferConfig`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/bigquerydatatransfer/bigquerydatatransferconfig) - Fix resource duplication loop. - [`ContainerCluster`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/container/containercluster) - Enable projectID to projectNumber transform in fields in Container LROs. ## May 12, 2026 Announcement Config Connector version 1.150.0 is now available. Feature New Alpha Resources (Direct Reconciler): - `GKEHubScope` - Manage [Google Kubernetes Engine Hub Scopes](https://cloud.google.com/anthos/fleet-management/docs/concepts#fleet-level-features) which let you group fleet resources for fine-grained management. - `CloudDeployTarget` - Manage [Cloud Deploy targets](https://cloud.google.com/deploy/docs/targets) which define where your application is deployed. Feature New Fields: - [`CertificateManagerCertificate`](https://cloud.google.com/config-connector/docs/reference/resource-docs/certificatemanager/certificatemanagercertificate) - Added `status.observedState` field, which includes `managed.state`, `managed.authorizationAttemptInfo`, and `managed.provisioningIssue`. This enables tracking the current state of the certificate even when `state-into-spec: absent` is used. - [`ContainerCluster`](https://cloud.google.com/config-connector/docs/reference/resource-docs/container/containercluster) - Added `spec.ipAllocationPolicy.additionalIpRangesConfigs` field. - [`ContainerNodePool`](https://cloud.google.com/config-connector/docs/reference/resource-docs/container/containernodepool) - Added `spec.networkConfig.subnetworkRef` field. Feature Improved resource creation logging for both Direct and DCL-based controllers by including structured diffs. Change Reconciliation Improvements: Added support for direct reconciliation to more resources, with opt-in behaviour. The API is unchanged. To use the direct reconciler, add the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation to the corresponding Config Connector object. This release note was edited on October 2, 2026. The following resources now have direct reconciliation support: - [`BigqueryTable`](https://cloud.google.com/config-connector/docs/reference/resource-docs/bigquery/bigquerytable) - Fixed a permanent difference in the `policyTag` field when using the direct controller, ensuring safer upgrades. - [`SQLInstance`](https://cloud.google.com/config-connector/docs/reference/resource-docs/sql/sqlinstance) - Added detailed diff reporting for the `userLabels` field. - [`DataplexLake`](https://cloud.google.com/config-connector/docs/reference/resource-docs/dataplex/dataplexlake) - Added structured diff reporting to improve visibility into resource changes. Fixed Bug Fixes: - [`ContainerCluster`](https://cloud.google.com/config-connector/docs/reference/resource-docs/container/containercluster) - Fixed a permanent difference in the `databaseEncryption.state` field and added support for the `ALL_OBJECTS_ENCRYPTION_ENABLED` value. - [`MemorystoreInstance`](https://cloud.google.com/config-connector/docs/reference/resource-docs/memorystore/memorystoreinstance) - Updated the controller to use change cookies, improving reconciliation stability and correctness. ## May 05, 2026 Announcement Config Connector version 1.149.1 is now available. Feature New Alpha Resources (Direct Reconciler): - [`NetworkServicesLBRouteExtension`](https://cloud.google.com/config-connector/docs/reference/resource-docs/networkservices/networkserviceslbrouteextension) [#6957](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/6957) - Manage [load balancing route extensions](https://cloud.google.com/service-extensions/docs/optimize-proxies-lb-route-extensions) which let you inject custom logic into the load balancing path. - [`ParameterManagerParameterVersion`](https://cloud.google.com/config-connector/docs/reference/resource-docs/parametermanager/parametermanagerparameterversion) [#7140](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/7140) - Manage [Parameter Manager parameter versions](https://cloud.google.com/secret-manager/docs/parameter-manager) which lets you to manage regional parameters. Feature New Fields: - [`ContainerCluster`](https://cloud.google.com/config-connector/docs/reference/resource-docs/container/containercluster) [#7336](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/7336) - Added `spec.nodeConfig.ephemeralStorageLocalSsdConfig.dataCacheCount` field to support GKE Data Cache. - [`ContainerNodePool`](https://cloud.google.com/config-connector/docs/reference/resource-docs/container/containernodepool) [#7336](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/7336) - Added `spec.nodeConfig.ephemeralStorageLocalSsdConfig.dataCacheCount` field to support GKE Data Cache. Feature New Features: - [Controlled CR reconciliation](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/6243) Added support for unmanaging specific resources through `resourceSettings` in `ConfigConnector` (global) and `ConfigConnectorContext` (per-namespace). This lets you to selectively disable reconciliation for specific Group/Kinds to save memory or manage resources differently. Change Reconciliation Improvements: Added support for direct reconciliation to more resources, with opt-in behaviour. The API is unchanged. To use the direct reconciler, add the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation to the corresponding Config Connector object. This release note was edited on October 2, 2026. - [`BigQueryDatasetAccess`](https://cloud.google.com/config-connector/docs/reference/resource-docs/bigquery/bigquerydatasetaccess) [#7000](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/7000) Fixed Bug Fixes: - [Preview Tool](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/7642) Fixed a connection error in the Config Connector preview tool and enforced read-only access to the cluster for improved security. ## April 22, 2026 Announcement Config Connector version 1.148.0 is now available. Feature New Alpha Resources (Direct Reconciler): - [`ParameterManagerParameterVersion`](https://cloud.google.com/config-connector/docs/reference/resource-docs/parametermanager/parametermanagerparameterversion) - Configure [Parameter Manager parameter versions](https://cloud.google.com/secret-manager/docs/parameter-manager) which lets you manage regional parameters. Feature New features: - [#6919](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/6919): `MultiClusterLeaseSpec` now supports integration with a syncer for KRM objects. This helps Config Connector take ownership of resources with service generated IDs. - [#7202](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/7202): `kompanion`: Added a Model Context Protocol (MCP) server to the `kompanion` tool to enable AI IDEs and assistants to interact with Config Connector resources. - [#7075](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/7075): `Config Connector controllers`: Added a `--skip-name-validation` flag to bypass duplicate controller name checks during registration, facilitating integration tests and multi-manager scenarios. Fixed Bug Fixes: - [#7145](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/7145): `SQLInstance`: Fixed an issue where `settings.dataCacheConfig` was incorrectly detected as different when `dataCacheEnabled` was `false`. - [#7200](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/7200): `SQLInstance`: Updated matching functions to treat nil values in KRM as equivalent to empty or default objects in Google Cloud, preventing unnecessary re-reconciliation loops. - [#6943](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/6943): `TagKey/TagValue`: Handle `ALREADY_EXISTS` error in TagKey and TagValue controllers by acquiring the existing resource. - [#6774](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/6774): `BigQueryAnalyticsHubDataExchange`: Added structured reporting diff to improve visibility into resource changes and fixed reconciliation logic errors. - [#7115](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/7115): `CloudBuildTrigger`: Restored missing descriptions in the CRD. - [#6693](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/6693): `RunService`: Fixed a typo in environment variable values in samples and test fixtures. Feature Documentation: - Added [a guide for controller configuration](https://github.com/GoogleCloudPlatform/k8s-config-connector/blob/master/docs/features/controller-configuration.md), detailing Direct, Terraform, and DCL controllers, including precedence rules and overrides. - Added [a guide for enabling VerticalPodAutoscaler (VPA) for Config Connector Pods](https://github.com/GoogleCloudPlatform/k8s-config-connector/blob/master/docs/features/containerresource.md) using `ControllerResource` and `NamespacedControllerResource`. - Added [a guide for the `config-connector` CLI and specifically for the `preview` command.](https://github.com/GoogleCloudPlatform/k8s-config-connector/blob/master/docs/cli/README.md). ## March 25, 2026 Announcement Config Connector version 1.147.1 is now available. Feature New Alpha Resources (Direct Reconciler): - `CloudDeployCustomTargetType` - Please replace any instances of the `DeployCustomTargetType` resource with the new `CloudDeployCustomTargetType` (v1alpha1) resource. Change Reconciliation Improvements: - Improved structured reporting diffs to provide better visibility into what changed during reconciliation for the following resources: - `BigQueryDataset` - `BigQueryReservationAssignment` - `BigQueryTable` - `CertificateManagerDNSAuthorization` - `CloudIdentityGroup` - `DataformRepository` - `MetastoreService` - `PrivilegedAccessManagerEntitlement` - `WorkflowsWorkflow` Feature New features: - Enhanced `config-connector preview` to support side-by-side comparison between default and alternative controllers. - Added a `--skip-name-validation` flag to Config Connector controllers to bypass duplicate controller name checks during registration. Fixed Bug Fixes: - Added CRD filtering for the preview recorder to skip non-CNRM objects. ## March 10, 2026 Breaking Config Connector version 1.144.0 was identified as a bad release. Do not use this version - upgrade directly to 1.145.0 or later. Announcement Config Connector version 1.146.0 is now available. Feature New Alpha Resources (Direct Reconciler): - `ParameterManagerParameter` - Manage [Parameter Manager Parameters](https://cloud.google.com/secret-manager/parameter-manager/docs/overview). Feature New Fields: - [`ContainerCluster`](https://cloud.google.com/config-connector/docs/reference/resource-docs/container/containercluster) - Added `spec.controlPlaneEndpointsConfig.dnsEndpointConfig.enableK8sTokensViaDns` field. Change Improvements: - [`ContainerCluster`](https://cloud.google.com/config-connector/docs/reference/resource-docs/container/containercluster) - Made `spec.clusterAutoscaling.autoProvisioningDefaults.bootDiskKMSKeyRef` mutable. - `NetworkServicesWasmPlugin` - Introduced identity and reference. - Added structured reporting diff to numerous direct controllers to enhance diff visibility. Fixed Bug Fixes: - [`SQLInstance`](https://cloud.google.com/config-connector/docs/reference/resource-docs/sql/sqlinstance) - Added client-side default for `RetainedBackups` and `RetentionUnit`, and validated the `edition` field. - Added `replicaConfiguration` as an unmanageable field. - Controller now correctly defaults the field `enablePrivatePathForGoogleCloudServices` to `false`. - [`CertificateManagerDnsAuthorization`](https://cloud.google.com/config-connector/docs/reference/resource-docs/certificatemanager/certificatemanagerdnsauthorization) - Sanitized Kubernetes labels to avoid 400 errors from invalid characters. - `ConfigConnector` Core - `preview` now performs an early exit when no resources are found to reconcile. - Fixed CRD field description for shared parent. - Fixed incorrect exit status in lint filter. - Updated `mockgcp` to improve compute regional resource mocks and defaults. ## February 22, 2026 Announcement Config Connector version 1.145.0 is now available. Feature New Beta Resources (Direct Reconciler): - [`ComputeSecurityPolicy`](https://cloud.google.com/config-connector/docs/reference/resource-docs/compute/computesecuritypolicy) - Manage Google Cloud Armor security policies. - `MemorystoreInstance` - Manage [Memorystore for Valkey Instances](https://cloud.google.com//memorystore/docs/valkey/reference/rest/v1/projects.locations.instances). Feature New Fields: - [`ContainerCluster`](https://cloud.google.com/config-connector/docs/reference/resource-docs/container/containercluster) - Added `spec.clusterAutoscaling.defaultComputeClassConfig` field. - [`RunJob`](https://cloud.google.com/config-connector/docs/reference/resource-docs/run/runjob) - Added `spec.template.template.volumes.nfs` field to support NFS backed Volumes. - Added `spec.template.template.volumes.gcs` field to support GCS backed Volumes. - [`SQLInstance`](https://cloud.google.com/config-connector/docs/reference/resource-docs/sql/sqlinstance) - Added `spec.settings.failoverDrReplicaRef` field to support designating CloudSQL Enterprise Plus DR Replicas. Feature New features: - Added the `preview` command to the `config-connector` CLI. The `preview` command has been removed from the experimental `kompanion` tool. Change Added support for structured diff reporting to the following direct controllers to improve logging and debugging: - [`ApigeeEnvgroup`](https://cloud.google.com/config-connector/docs/reference/resource-docs/apigee/apigeeenvgroup) - [`ApigeeInstance`](https://cloud.google.com/config-connector/docs/reference/resource-docs/apigee/apigeeinstance) - [`AssetFeed`](https://cloud.google.com/config-connector/docs/reference/resource-docs/asset/assetfeed) - [`AssetSavedQuery`](https://cloud.google.com/config-connector/docs/reference/resource-docs/asset/assetsavedquery) - BackupVaultIdentity - BigtableLogicalView - [`CloudDeployDeliveryPipeline`](https://cloud.google.com/config-connector/docs/reference/resource-docs/clouddeploy/clouddeploydeliverypipeline) - ColabRuntime - [`RedisCluster`](https://cloud.google.com/config-connector/docs/reference/resource-docs/redis/rediscluster) - [`SpannerBackupSchedule`](https://cloud.google.com/config-connector/docs/reference/resource-docs/spanner/spannerbackupschedule) - [`SpannerInstance`](https://cloud.google.com/config-connector/docs/reference/resource-docs/spanner/spannerinstance) - SpannerInstanceConfig - TaskQueue - [`WorkstationConfig`](https://cloud.google.com/config-connector/docs/reference/resource-docs/workstations/workstationconfig) Fixed Bug Fixes: - [`DataformRepository`](https://cloud.google.com/config-connector/docs/reference/resource-docs/dataform/dataformrepository) - Fixed a bug where the `serviceAccountRef` field could not be updated. - [`SpannerBackupSchedule`](https://cloud.google.com/config-connector/docs/reference/resource-docs/spanner/spannerbackupschedule) - Fixed an issue with invalid update masks by handling output-only fields. ## January 30, 2026 Announcement Config Connector version 1.144.0 is now available. Feature New Beta Resources (Direct Reconciler): - [`TagsLocationTagBinding`](https://cloud.google.com/config-connector/docs/reference/resource-docs/tags/tagslocationtagbinding) - `TagsLocationTagBinding` is promoted to beta and now uses the direct reconciler by default. - Supports tagging of regional resources, including `ArtifactRegistryRepository`, `CloudRun` (`RunJob`, `RunService`), `BigQueryDataset`, `BigQueryTable`, and `StorageBucket`. - `spec.location` should be set to the region of the resource being tagged. Fixed Bug Fixes: - Fixed incorrect diffs in `TagsLocationTagBinding` caused by project number versus. project ID mismatches. Change Reconciliation Improvements: - [`TagsLocationTagBinding`](https://cloud.google.com/config-connector/docs/reference/resource-docs/tags/tagslocationtagbinding) - Switched to direct reconciliation as the default reconciler. ## January 27, 2026 Announcement Config Connector version 1.134.4 is now available. Fixed Bug Fixes: - [#6035](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/6035): Fixed an issue where `managedFields` metadata could be incorrectly attributed to the `status` subresource during spec updates, causing "Location must be set" errors. Feature [#6065](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/6065): Enabled Vertical Pod Autoscaler (VPA) support. You can enable VPA for Config Connector components via `ControllerResource` and `NamespacedControllerResource` to automatically adjust resource requests. ## January 23, 2026 Announcement Config Connector version 1.143.0 is now available. Feature New Alpha Resources (Direct Reconciler): - `ParameterManagerParameter` Feature New Beta Resources (Direct Reconciler): - `ArtifactRegistryRepository` - `LoggingLink` - `MemorystoreInstance` - `PrivateCACAPool` Feature New Features: - Set `GOMEMLIMIT` for KCC workloads to improve memory management and stability. Feature New Fields: - `AlloyDBInstance` - Added `spec.connectionPoolConfig` field. - Added `status.connectionPoolConfig` field. Change Reconciliation Improvements: - `TagsTagBinding` - Added support for `organizations` in `parentRef`. - Added support for multiple targets in `parentRef`. - Resource References (refs.Ref) support added for the following resources to improve reference resolution: - `BigQueryTable` - `BigQueryDataset` - `CloudRunService` - `CloudRunJob` - `ArtifactRegistryRepository` - `StorageBucket` Fixed Bug Fixes: - [Issue 6221](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/6221): `ComputeBackendService` can now correctly refer to `clientTLSPolicy`. - [Issue 6156](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/6156): `BigQueryTable` now ignores `int64` to `int32` schema changes when configured. - [Issue 6026](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/6026): Fixed identity parsing for `TagsTagValue`. ## January 09, 2026 Announcement Config Connector version 1.142.0 is now available. Feature New Beta Resources (Direct Reconciler): - `AlloyDBBackup` - `AccessContextManagerAccessLevel` Feature New Features: - IAM: Added support for `iam.cnrm.cloud.google.com/disable-dependent-services` annotation. - Added support for Cilium cluster-wide network policy. Feature New Fields: - `AlloyDBInstance` - Added `spec.observabilityConfig` and `spec.queryInsightsConfig` fields. - `ContainerNodePool` - Added `spec.nodeConfig.enableNestedVirtualization` field. Change Reconciliation Improvements: Added support for direct reconciliation to more resources, with opt-in behaviour. The API is unchanged. To use the direct reconciler, add the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation to the corresponding Config Connector object. The following resources now have direct reconciliation support: - `TagsLocationTagBinding`: Now supports direct reconciliation. Fixed Bug Fixes: - `BatchJob`: Fixed a bug where the resource could not be created. - `FirewallPolicyRule`: Fixed an issue with updating the resource. - `IAMServiceAccountKey`: Fixed an issue causing unnecessary re-reconciliation. - Fixed a bug where `ComputeBackendService` could not refer to `clientTLSPolicy` due to an invalid format. - Fixed a bug where interconnect attachments were not ignored. - Fixed a bug in the GitHub MCP server. - Fixed a bug in the private cluster endpoint for `mockgcp`. ## December 19, 2025 Announcement Config Connector version 1.141.0 is now available. Feature New Features: - Enabled Vertical Pod Autoscaler (VPA) support for Config Connector controllers. - Added `verticalPodAutoscalerMode` field to `ConfigConnector` and `ConfigConnectorContext` resources. Feature New Fields: - RunJob - Added `spec.template.spec.containers[].port` field. - DataplexTask - Replaced `project` with `projectRef`. - Replaced `serviceAccount` with `serviceAccountRef`. - Replaced `kmsKey` with `kmsKeyRef`. Fixed Bug Fixes: - Fixed various issues in `observedState` handling for resources with reference fields. - Fixed an issue where IAMPolicy and IAMPartialPolicy controllers would alphabetize the members field within the resource spec and write it back. This behavior can conflict with intent-based reconciliation from GitOps systems such as Config Sync, causing a loop of updates and potentially exhausting IAM read quotas. ## December 15, 2025 Announcement Config Connector version 1.140.2 is now available. Fixed - Fixed a bug where the IAMPolicy and IAMPartialPolicy controllers would alphabetize the members field within the resource spec and write it back. This behavior can conflict with intent-based reconciliation from GitOps systems such as Config Sync, causing a loop of updates and potentially exhausting IAM read quotas. This issue affected versions 1.140.0 and has now been patched in version 1.140.2. ## December 04, 2025 Announcement Config Connector version 1.140.0 is now available. Feature New Beta Resources (Direct Reconciler): - `CertificateManagerCertificateIssuanceConfig` - Manage Certificate Manager certificate issuance configurations for automating certificate issuance. Change New Alpha Resources (Direct Reconciler): - `AssuredWorkloadsWorkload` - Manage Assured Workloads workloads to support compliance and security requirements. - `ConfigDeliveryResourceBundle` - Manage Config Delivery resource bundles for Config Sync. Feature New Fields: - `AlloyDBCluster` - Added `spec.restoreContinuousBackupSource` and `spec.restoreBackupSource` fields to support restoring from a backup. - `BigQueryReservationAssignment` - Added `spec.jobType` field. - `FirestoreDatabase` - Added `spec.deleteProtectionState` field. - `FirestoreField` - Added `spec.ttlConfig` field. - `RunJob` - Added `spec.template.template.containers.dependsOn` field. Change Reconciliation Improvements: - Integrated Multi-Cluster Leader Election for improved reliability in multi-cluster setups. Fixed - Fixed an issue where `BigQueryReservationAssignment` was not exposing `externalRef`. - Fixed an issue with `CertificateManagerDNSAuthorization` API, Fuzzer and Mapper. - Fixed an issue with `FirestoreDatabase` defaulting logic. ## November 20, 2025 Announcement Config Connector version 1.139.0 is now available. Change New Alpha Resources (Direct Reconciler): - `FirestoreField` Feature New Features: - The controller type is now reported at the start and end of reconciliation. - Mockgcp now supports `iap oauth brands` and `bigtable materializedview`. Change Reconciliation Improvements: - `IAM partial policy management` Fixed - Reduced the memory footprint of the recorder. - `SQLInstance`: Fixed an issue where empty `maintenanceVersion` patches were sent. The `settings` and `maintenanceVersion` fields are now unmanaged. - `FirestoreDatabase`: Fixed boolean value exports. ## November 14, 2025 Announcement Config Connector version 1.138.0 is now available. Feature New Beta Resources (Direct Reconciler): - `BackupDRBackupVault` - `OrgPolicyCustomConstraint` Feature New Alpha Resources (Direct Reconciler): - `FirestoreBackupSchedule` - `FirestoreDocument` Change Reconciliation Improvements: - Improved Normalization logic for `OrgPolicy`, `RunJob`, `TagsTagBinding`, and `VertexAIIndex` resources. Fixed Bug Fixes: - Fixed format validation issue in the `DataflowFlexTemplateJob` direct controller when the `spec.subnetworkRef.external` field contains full URL. - Updated `status.observedGeneration` in `ConfigConnector` object. ## October 16, 2025 Change New Beta Resources (Direct Reconciler): - `DocumentAIProcessorVersion` - `EssentialContactsContact` - `BigQueryBigLakeTable` - `BackupDRBackupPlan` Fixed Bug Fixes: - Fixed an issue where `ComputeBackendService` backends were not sorted. - Fixed an issue where `CloudFunctionsFunction` runtime was not a supported value. - Fixed an issue with labels for `BackupDRBackupPlan`. - Fixed an issue with labels for `RunJob`. - Fixed a fuzzing issue for `FirestoreField`. - Fixed an issue with `KMSCryptoKey` import. - Fixed a flakiness issue in the `MonitoringDashboard` fuzzer. - Fixed a flakiness issue in tests. - Fixed an issue with bad labels in tests. - Fixed an issue with `etag` in direct reconciliation. Change New Alpha Resources (Direct Reconciler): - `BigtableMaterializedView` - `MemorystoreInstance` Change Reconciliation Improvements: - Enabled opt-in for IAM partial policy management. - Enabled server-side apply for KMS resources. - Improved reconciliation for `BigtableLogicalView` by using deep reflection. - Improved reconciliation for `FirestoreDatabase` with identity pattern and export support. - Improved reconciliation for `RunJob` with export support. - Unified `ComputeTargetTCPProxy` direct API and controller. Feature New Fields: - `BigtableMaterializedView`: Added `spec.sourceTableRef` and `spec.definition`. - `BackupDRBackupPlan`: Added `spec.backupConfig.retentionPeriodDays` and `spec.backupConfig.backupWindow`. Announcement Config Connector version 1.137.0 is now available. ## October 07, 2025 Change Reconciliation Improvements: - Introduced [Stateful Reconciliation for Direct Controllers](https://github.com/GoogleCloudPlatform/k8s-config-connector/blob/master/docs/designs/stateful-reconciliation-with-cookie.md). With stateful reconciliation, the direct controller stores a hash of the last successfully applied `.spec` in the resource's `.status`. This provides a lightweight, GitOps-safe record when a user has modified the desired state of the resource. Change New Beta Resources (Direct Reconciler): - [`AssetFeed`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/asset/assetfeed) - [`BigQueryReservationAssignment`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/bigqueryreservation/bigqueryreservationassignment) - [`CloudDeployDeliveryPipeline`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/clouddeploy/clouddeploydeliverypipeline) - [`ComposerEnvironment`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/composer/composerenvironment) Fixed Bug Fixes: - Added support for checking `etag` in spec for alpha resources. - Fixed an issue where `CloudIdentityMembership` roles comparison would fail. - Fixed a bug where the wrong GVK was reported in IAM controller. - Fixed a bug where errors were swallowed when reading a Secret. - Fixed an issue with LRO endTime in mockgcp. - Fixed a bug in the `etag` mapper. - Fixed a bug in the mapper generator for slice and single object map. - Fixed a bug in the mapper generator for OneOf if the input is not proto.Message. - Fixed an import for refs in the same package in `controllerbuilder`. Feature New Fields: - [`ComposerEnvironment`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/composer/composerenvironment) - Added `spec.storageConfig` field. - Added `spec.config.workloadsConfig.dagProcessor` field. - Added `spec.config.workloadsConfig.triggerer` field. - Added `spec.config.softwareConfig.webServerPluginsMode` field. - Added `spec.config.softwareConfig.cloudDataLineageIntegration` field. Announcement Config Connector version 1.136.1 is now available. ## September 24, 2025 Announcement Config Connector version 1.134.1 is now available. Fixed Bug Fixes: - [#5230](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/5230): Fixed an issue that could lead to premature certificate rotation by ensuring errors are not swallowed when reading a Secret. - [#5231](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/5231): Add more verbose logging during certificate validation to assist with debugging. ## September 22, 2025 Fixed Bug Fixes: - [PR#5009](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/5009) Fix the nil pointer dereference error in AlloyDB direct controller Announcement Config Connector version 1.135.0 is now available. Feature New Fields: - `AlloyDBCluster` - Added `spec.databaseVersion` field Change New Beta Resources (Direct Reconciler): - `AssetSavedQuery` - `PubSubSnapshot` Change Modified Beta Reconciliation: We migrated the following resources from the Terraform-based or DCL-based controller to the new Direct Controller. - `VMWareEngineExternalAddress` ## September 03, 2025 Change Improved reconciliation by migrating the following resources from the Terraform-based or DCL-based controller to the new direct controller. These resources are migrated automatically and you no longer need to apply the `opt-in` annotation to enable the direct controller: - [`CloudIdentityGroup`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/cloudidentity/cloudidentitygroup) - [`CloudIdentityMembership`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/cloudidentity/cloudidentitymembership) Fixed Bug Fixes: - `ConfigConnectorContext`: - [PR#4995](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/4995): `status.observedGeneration` is now being set on the ConfigConnectorContext. - [PR#4657](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/4657): Added `spec.managerNamespace`. - `SQLInstance`: - [PR#4838](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/4838): Fixed bug in SQLInstance `maintenanceVersion` UPDATE operation - [PR#4843](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/4843): Set status on acquisition for SQLInstance controller - [PR#4857](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/4857): Support SQLInstance `maintenanceVersion` in CREATE operation Change New Fields: - `ContainerCluster`: DNS endpoint is supported in ContainerCluster. Announcement Config Connector version 1.134.0 is now available. ## July 30, 2025 Feature New Beta Resources (Direct Reconciler): - [`APIGatewayAPI`](https://docs.cloud.google.com/config-connector/docs/reference/docs/reference/resource-docs/apigateway/apigatewayapi) - [`AppHubApplication`](https://docs.cloud.google.com/config-connector/docs/reference/docs/reference/resource-docs/apphub/apphubapplication) - `StorageAnywhereCache` Change New Alpha Resources (Direct Reconciler): - `BigtableLogicalView` Change Reconciliation Improvements Added support for direct reconciliation to more resources, with opt-in behaviour. The API is backward compatible. The following resources now have direct reconciliation support - `BigQueryTable` - Use the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation on the `BigQueryTable` CR object to opt-in the direct controller. - The direct controller also supports adding BigQueryDataPolicies directly to BigQueryTable columns within `spec.schema`. Fixed - [PR#4808](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/4808) filtered out Kubernetes labels that are invalid for Google Cloud in the `ComputeForwardingRule` direct controller, ensuring backward compatibility after migrating to the direct controller. Announcement Config Connector version 1.133.0 is now available. ## July 14, 2025 Announcement Config Connector version 1.132.1 is now available. Change Reconciliation Improvements: - [SpannerInstance](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/spanner/spannerinstance) - You can opt-in the direct controller by adding the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation to the `SpannerInstance` resource\`. - Direct controller is opt-in if using the following fields: - `spec.labels` - `spec.defaultBackupScheduleType` - `spec.edition` - `spec.autoscalingConfig` ## June 10, 2025 Change Reconciliation Improvements: - [BigtableAppProfile](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/bigtable/bigtableappprofile) - You can opt-in the direct controller by adding the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation to the `BigtableAppProfile` resource. - Added support for `spec.dataBoostIsolationReadOnly` field for resources reconciled by the direct controller. - [CloudIdentityGroup](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/cloudidentity/cloudidentitygroup) and [CloudIdentityMembership](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/cloudidentity/cloudidentitymembership) - You can opt-in the direct controller by adding the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation to the `CloudIdentityGroup` and `CloudIdentityMembership` resources. - With direct reconciliation, creating new resources will no longer write back the service-generated ID to `spec.resourceID`. To acquire a resource, you can find its resourceID from the last part of `status.externalRef` field, or via gcloud command or Cloud Console. The `spec.resourceID` field is used for acquisition only, leave the field unset when creating a new resource. Feature - [Storage Bucket](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/storage/storagebucket) - Removed immutability constraint on `spec.location` and `spec.customPlacementConfig.dataLocations` fields. To learn more, see [Relocate buckets](https://cloud.google.com/storage/docs/bucket-relocation/relocate-buckets). Change New Alpha Resources (Direct Reconciler): - `OrgPolicyPolicy` - `OrgPolicyCustomConstraint` - `SpeechRecognizer` - `StorageAnywhereCache` Feature New Fields: - [SpannerInstance](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/spanner/spannerinstance) For opt-in direct controller, - Added `spec.labels` field. - Added `spec.defaultBackupScheduleType` field. - [SecretManagerSecret](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/secretmanager/secretmanagersecret) For opt-in direct controller, - Added `spec.labels` field. Announcement Config Connector version 1.132.0 is now available. Feature New Beta Resources (Direct Reconciler): - [`SpeechCustomClass`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/speech/speechcustomclass) - [`SpeechPhraseSet`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/speech/speechphraseset) - [`SpeechRecognizer`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/speech/speechrecognizer) - [`VertexAINotebooksInstance`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/notebooks/notebookinstance) - [`VertexAIMetadataStore`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/vertexai/vertexaimetadatastore) ## May 01, 2025 Feature New Beta resources (direct reconciler) - [`IAPSettings`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/iap/iapsettings) Change New Alpha resources (direct reconciler) - `ComputeNetworkAttachment` - `ComputeNetworkEdgeSecurityService` - `DataplexEntryGroup` - `DataplexEntryType` - `DataplexTask` - `DataplexZone` - `DatastreamRoute` - `DocumentAIVersion` - `GKEBackupBackup` - `GKEBackupRestore` - `PubSubSnapshot` - `SpeechCustomClass` - `VMwareEngineExternalAddress` - `MetastoreService` - `MetastoreFederation` - `MetastoreBackup` - `APIQuotaPreference` - `APIQuotaAdjusterSettings` - `EventarcGoogleChannelConfig` - `EventarcChannel` - `AssetSavedQuery` - `AssetFeed` - `EssentialContactsContact` - `DataCatalogEntryGroup` - `DataCatalogEntry` - `DataCatalogTagTemplate` - `DataCatalogTag` Announcement Config Connector version 1.131.0 is now available. Fixed - [Fixed an issue](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/4199): excessive compute.firewallPolicies.patchRule Logs triggered by Config Connector direct reconciliation. ## April 07, 2025 Feature New Fields - [`GKEHubFeatureMembership`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/gkehub/gkehubfeaturemembership) - Added `spec.configmanagement.configSync.stopSyncing` in version1.129. - [SpannerInstance](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/spanner/spannerinstance). - Added `spec.defaultBackupScheduleType` field. - Added `spec.labels` field Feature New Beta resources (direct reconciler) - [`ApigeeEndpointAttachment`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/apigee/apigeeendpointattachment) - [`ApigeeEnvgroupAttachment`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/apigee/apigeeenvgroupattachment) - [`ApigeeInstanceAttachment`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/apigee/apigeeinstanceattachment) - [`ManagedKafkaTopic`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/managedkafka/managedkafkatopic) - [`SecureSourceManagerInstance`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/securesourcemanager/securesourcemanagerinstance) - [`SecureSourceManagerRepository`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/securesourcemanager/securesourcemanagerrepository) Change New Alpha resources (direct reconciler) - `ApphubApplication` - `BackupDRManagementServer` - `BackupDRBackupVault` - `BackupDRBackupPlan` - `BackupDRBackupPlanAssociation` - `BatchJob` - `BigLakeTable` - `BigQueryReservation` - `CodeDeployDeliveryPipeline` - `DataplexLake` - `DatastreamPrivateConnection` - `DatastreamConnectionProfile` - `DocumentAIProcessor` - `GKEBackupBackupPlan` - `GKEBackupRestorePlan` - `NetAppBackupPolicy` - `NotebooksEnvironment` - `SpannerInstanceConfig` - `VertexAIFeaturestore` - `VMwareEnginePrivateCloud` - `VMwareEngineNetwork` - `VMwareEngineNetworkPeering` - `VMwareEngineNetworkPolicy` - `WorkflowExecution` Announcement Config Connector version 1.130.2 is now available. Change Reconciliation Improvements Added support for direct reconciliation to more resources, with opt-in behaviour. The API is backward compatible. To use the direct reconciler, add the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation to the corresponding Config Connector object. The following resources now have direct reconciliation support (and we list some of the issues that this fixes): - [SpannerInstance](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/spanner/spannerinstance) - You can use `spec.edition` field to optimize your [enterprise edition type](https://docs.cloud.google.com/spanner/docs/editions-overview) - You can use `spec.autoscalingConfig` to automate the scaling instead of manually configure `spec.processingUnit` or `spec. numNodes`. - You can use the `defaultBackupScheduleType` now. - *Behavior Change* If you use the SpannerInstance Kubernetes `metadata.labels` to configure your GCP labels, please change them to use the `spec.labels` field instead. ## February 28, 2025 Change New Alpha resources (direct reconciler) - `ManagedKafkaTopic` - `ApigeeInstanceAttachment` - `ApigeeEnvgroupAttachment` - `ApigeeEndpointAttachment` Change Reconciliation Improvements - [`SQLInstance`](https://github.com/GoogleCloudPlatform/k8s-config-connector/tree/master/pkg/test/resourcefixture/testdata/basic/sql/v1beta1/sqlinstance) - All SQLInstance types are now reconciled using the new direct controller instead of the legacy Terraform-based controller. The previous "opt-in" annotation ([document reference](https://github.com/GoogleCloudPlatform/k8s-config-connector/blob/master/docs/features/optin.md)) no longer applies. Users no longer need to apply the "opt-in" annotation to SQLInstance resources to enable the direct controller. Regardless of the presence (or absence) of an opt-in annotation on SQLInstance resources, the direct reconciler will be used. - This change enables all SQLInstance resources to switch from edition ENTERPRISE to ENTERPRISE_PLUS and fixes [the bug that prevented SQL Instance upgrade](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/2907). Announcement Config Connector version 1.129.2 is now available. Feature New Beta resources (direct reconciler) - [`ManagedKafkaCluster`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/managedkafka/managedkafkacluster) - [`ApigeeInstance`](https://docs.cloud.google.com/apigee/docs/api-platform/system-administration/instances) - `AlloydbInstance` ## February 04, 2025 Change Reconciliation Improvements - We have added support for direct reconciliation to more resources, with opt-in behaviour. The API is unchanged. To use the direct reconciler, add the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation to the corresponding Config Connector object. The following resources now have direct reconciliation support: - `AlloyDBInstance` - `SpannerInstance` Change New Alpha resources (direct reconciler) - `IAPSettings` - Customize the [Identity-Aware Proxy (IAP)](https://docs.cloud.google.com/iap/docs/customizing) settings for applications and services running on Google Cloud Platform. - `SecureSourceManangerInstance` - `SecureSourceManangerRepository` Announcement Config Connector version 1.128.0 is now available. Fixed `DataformRepository` fields validation error. - Fixed the incorrect format validation for the following fields: - `spec.gitRemoteSettings.authenticationTokenSecretVersionRef` - `spec.gitRemoteSettings.sshAuthenticationConfig.userPrivateKeySecretVersionRef` - `spec.npmrcEnvironmentVariablesSecretVersionRef` Feature New Beta resources (direct reconciler) - [`ApigeeEnvgroup`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/apigee/apigeeenvgroup) - Define environment groups to specify the hostnames for routing traffic to Apigee environments. - [`KMSAutokeyconfig`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/kms/kmsautokeyconfig) - Manage the [KMS auto key](https://docs.cloud.google.com/kms/docs/autokey-overview) which simplifies the CMEKs provisioning and assignment. Feature New Fields - `SpannerInstance` - You need to use the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation on SpannerInstance resource to opt-in these features. - `spec.autoscalingConfig` - `spec.edition` ## December 23, 2024 Change `SecretManagerSecretVersion` Reconciliation Improvements - You can use the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation on the object to opt-in the direct controller, which gives the following improvements: - Resolved update stalling caused by `DependencyNotReady` errors. - Fixed the friction in `spec.enabled` that enabling or disabling a secret version does not always take effect in GCP. - **API Behavior Change** The service generated ID is changed from `spec.resourceID` to `status.version` with `status.externalRef` (new field) to guardrail the identity. Fixed - `Dataflowflextemplatejob` subnetwork validation error. - Error message `should match regions/REGION/subnetworks/SUBNETWORK` Feature New Fields - `BigQueryDataTransferConfig` - Added `spec.scheduleOptionsV2` to customize the different types of data transfer schedule. - Added `status.observedState.error` with detailed information about reason of the latest config failure. - `GkeHubFeatureMembership` - Added `spec.configmanagement.management` to enable Config Sync Auto Upgrade. This is an opt-in feature and you need to turn on the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation on the object. Announcement Config Connector version 1.127.0 is now available. Feature New Beta resources (direct reconciler) - [`BigQueryAnalyticsHubListing`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/bigqueryanalyticshub/bigqueryanalyticshublisting) - [`FirestoreDatabase`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/firestore/firestoredatabase) - [`WorkstationConfig`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/workstations/workstationconfig) - [`Workstation`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/workstations/workstation) Change `SecretManagerSecret` Reconciliation Improvements - You can use the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation on the object to opt-in the direct controller, which gives the following improvements: - Enhanced `spec.rotation.nextRotationTime` to use a fixed datetime value to avoid relative `now()` friction. - Fixed the `spec.replication.auto` immutable issue - Added the in-use version aliases in `status.observedState.versionAliases` - Resolved update stalling issues. - Clarify the TTL use. See the problems and share your use in [GitHub issue #3395](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/3395) ## December 10, 2024 Announcement Config Connector version 1.126.0 is now available. Feature Use BigQueryConnectionConnection to provide the IAM Service Account - `IAMPolicyMember` - Added `spec.memberFrom.bigQueryConnectionConnectionRef` - See [an example](https://github.com/GoogleCloudPlatform/k8s-config-connector/blob/d2d887f6e416d329930b14d1e7ab99a3b4591ecb/config/samples/resources/iampolicymember/policy-member-with-bigqueryconnection-reference/iam_v1beta1_iampolicymember.yaml#L23) on IAMPolicyMember use BigqueryConectionConnection "cloudSQL" - `IAMPartialPolicy` - Added `spec.memberFrom.bigQueryConnectionConnectionRef`. Announcement Config Connector system management CRDs `ControllerReconciler` and `NamespacedControllerReconciler` are promoted to Beta. See how to [configure the Controller manager rate limit](https://docs.cloud.google.com/config-connector/docs/how-to/customize-controller-manager-rate-limit). Feature New Beta resources (direct reconciler) - [`BigQueryTransferConfig`](https://docs.cloud.google.com/bigquery/docs/reference/datatransfer/rest/v1/projects.locations.transferConfigs) - Manage the metadata needed to perform a BigQuery data transfer. - [`KMSKeyHandle`](https://docs.cloud.google.com/bigquery/docs/reference/datatransfer/rest/v1/projects.locations.transferConfigs) - Manage the provisioning of a CryptoKey. Change New Alpha Resources - Add new resource [`WorkstationConfig`](https://docs.cloud.google.com/workstations/docs/create-configuration) ## November 13, 2024 Announcement Config Connector version 1.125.0 is now available. Feature New Beta resources (direct reconciler) - [`BigQueryConnectionConnection`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/bigqueryconnection/bigqueryconnectionconnection) - Manage [connections](https://docs.cloud.google.com/bigquery/docs/working-with-connections) to connect to Google services and external data sources - [`BigQueryAnalyticsHubDataExchange`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/bigqueryanalyticshub/bigqueryanalyticshubdataexchange) - Manage [data exchange](https://docs.cloud.google.com/bigquery/docs/analytics-hub-introduction#data_exchanges) to enable self-service data sharing - [`PrivilegedAccessManagerEntitlement`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/privilegedaccessmanager/privilegedaccessmanagerentitlement) - Manage [entitlements](https://docs.cloud.google.com/iam/docs/pam-create-entitlements) to grant for projects, folders, and organizations - [`WorkstationCluster`](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/workstations/workstationcluster) - Manage [workstation cluster](https://docs.cloud.google.com/workstations/docs/overview) to define a group of workstations in a particular region and the VPC network they're attached to. Feature Added cluster mode to manage the rate-limit for the Config Connector requests - You can [set the rate-limit for the reconciling requests](https://github.com/GoogleCloudPlatform/k8s-config-connector/blob/master/operator/config/samples/namespaced_controller_reconciler_customization_sample.yaml) to the kube-apiserver in Cluster and Namespace mode. - Configure `NamespacedControllerReconciler` (Alpha) for namespace mode. This is added since 1.119 - Configure `ControllerReconciler` (Alpha) for cluster mode. The [ControllerReconciler](https://github.com/GoogleCloudPlatform/k8s-config-connector/blob/8935709b8c3daf8b1e2428eece31522a1fcb7d73/operator/config/samples/namespaced_controller_reconciler_customization_sample.yaml) shows an example. Change [`SQLInstance`](https://github.com/GoogleCloudPlatform/k8s-config-connector/tree/master/pkg/test/resourcefixture/testdata/basic/compute/v1beta1/computefirewallpolicyrule) Reconciliation Improvements - You can use the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation on the SQLInstance CR object to opt-in the direct controller. - The direct reconciler contains 2 fix and improvement: - Fix the upgrade and downgrade issue between ENTERPRISE and ENTERPRISE_PLUS. - Supports creating from clone functionality via `spec. cloneSource` - Migrated the `SQLInstance` from the Terraform-based or DCL-based controller to the new Direct Controller to enhance the reliability and performance. The CRD is unchanged. Change [`ComputeFirewallPolicyRule`](https://github.com/GoogleCloudPlatform/k8s-config-connector/tree/master/pkg/test/resourcefixture/testdata/basic/compute/v1beta1/computefirewallpolicyrule) Reconciliation Improvements - You can use the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation on the `ComputeFirewallPolicyRule` CR object to opt-in the direct controller, which fixes the targetResources error "required value priority could not be found". - Migrated this resource from the Terraform-based controller to the new Direct Controller to enhance the reliability and performance. The resource CRD is unchanged. Change `AlloyDBInstance` - Added `spec.networkConfig.enableOutboundPublicIp` field. - Added `status.outboundPublicIpAddresses` field. Fixed [Issue 2973](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/2973) kubelet_config has `insecure_kubelet_readonly_port_enabled: true` set even if not configured in the `ContainerNodePool` object. Fixed [Issue 3007](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/3007) `ComputeBackendService` cannot refer clientTLSPolicy due to invalid format ## October 16, 2024 Change `CertificateManagerDNSAuthorization` - Add the `spec.Location` field. Change `ComputeForwardingRule` - Added `spec.target.googleApisBundle` field (allowed values are `all-apis` or `vpc-sc`). Note, when configuring this field, the resource will use direct reconciliation. Change `CertificateManagerDNSAuthorization` is migrated from the Terraform-based to the new Direct controller to enhance reliability and performance. The resource CRD is unchanged. Announcement Config Connector version 1.124.0 is now available. Change `RedisCluster` is promoted from alpha to beta (Direct Reconciler). Change New Alpha Resources (Direct Reconciler) - `PrivilegedAccessManagerEntitlement` - `BigQueryAnalyticsHubDataExchange` Announcement **The direct resource development guide is now available for contributors** To improve the Config Connector resource development process, we have a new development guide to contributing resources to Config Connector with the direct reconciliation process. This new approach makes contributing more reliable and consistent with Kubernetes development practices. For more information, read the new [Direct resource development guide](https://github.com/GoogleCloudPlatform/k8s-config-connector/tree/master/docs/develop-resources). ## September 23, 2024 Announcement Config Connector version 1.123.1 is now available. Change `BigQueryConnectionConnection` (v1alpha1) now uses direct reconciliation. Change `BigQueryDataTransferConfig` (v1alpha1) now uses direct reconciliation. Breaking If you use the `CloudIdentityGroup`, `CloudBuildTrigger` and `FirestoreIndex` resources, do not use version 1.123.0, as it contains regression issues for these resources due to the `state-into-spec` setting. Change `DataformRepository` is promoted from alpha to beta. Fixed [Config Connector switches between the Direct and TF-based reconcilers depending on the `SQLInstances` objects' use of the `spec.cloneSource` field](https://github.com/GoogleCloudPlatform/k8s-config-connector/pull/2731) Announcement Starting from this version, all new CustomResources (CRs) have the `cnrm.cloud.google.com/state-into-spec` annotation field default to `absent`. For more information about this behavior, see the [`spec` fields documentation](https://docs.cloud.google.com/config-connector/docs/concepts/ignore-unspecified-fields#absent). The behavior of existing CRs is not impacted by this change. Announcement You can use the `alpha.cnrm.cloud.google.com/reconciler: direct` annotation on `DataflowFlexTemplateJob` resource to opt-in the Direct Cloud Reconciler, which provides an advanced status update solution for some timeout issues. Change Added `FirestoreDatabase` (v1alpha1). This uses direct reconciliation. ## September 11, 2024 Announcement Config Connector version 1.122.0 is now available. Change `RunJob` Add the `spec.template.template.volumes[].cloudSqlInstance` field to configure Cloud SQL instance. Change `ContainerCluster` The `spec.nodeConfig.taint` can be updated in place in lieu of destroying and recreating the object. Change `RedisCluster` (Alpha) now uses direct reconciliation. Change Added `RedisCluster` (Alpha) resource for service Redis. Change `SQLInstance` now uses direct reconciliation. Change `SQLInstance` Add the `spec.cloneSource` field to clone a SQLInstance. Change `ContainerNodePool` The `spec.nodeConfig.taint` can be updated in place in lieu of destroying and recreating the object. Announcement The `state-into-spec` field now defaults to `Absent` in all Config Controller clusters. ## August 05, 2024 Announcement Config Connector version 1.121.0 is now available. Announcement The `state-into-spec` field now defaults to `Absent` in any *new* Config Controller clusters. Starting in version 1.122, this will be the default for all Config Controller clusters. Starting in version 1.123, this will be the default for all Config Connector clusters. Change `BigQueryTable` - Added `spec.requirePartitionFilter` field. This release note was added on August 20. Fixed `BigQueryConnection` - Added `status.observedState` field to store the output-only fields which are previously mistakenly defined in `spec`. Change `DataformRepository` (Alpha) now uses direct reconciliation. Fixed `BigtableInstance` - When autoscaling is enabled (`spec.cluster[].autoscalingConfig.`), does not use `numNodes` (`spec.cluster[].numNodes=2`) as that applies only to manual scaling. ## July 09, 2024 Change `MonitoringDashboard` - Added `dashboardFilters` support. - Added `alertChart` widgets. - Added `collapsibleGroup` widgets. - Added `pieChart` widgets. - Added `sectionHeader` widgets. - Added `singleViewGroup` widgets. - Added `timeSeriesTable` widgets. - Added `blankView` to `scorecard` widgets. - Added `dataSets.targetAxis` and `y2Axis` fields to `xyChart` widgets. - Added `id` field to all widgets. - Added `prometheusQuery` and `outputFullDuration` to timeSeriesQuery. - Added `style` fields to text widgets. - Added `targetAxis` field to thresholds. Change `StorageBucket` - Added `spec.softDeletePolicy` field. - Added `status.observedState.softDeletePolicy` field. Change `AlloyDBInstance` - Added `networkConfig` field to support Public-IP feature. Change IAM configuration can now be applied to `PrivateCACAPool`. Change `CloudBuildWorkerPool` is promoted from alpha to beta. Announcement Config Connector version 1.120.1 is now available. Change `MonitoringAlertPolicy` - Added `spec.severity` field. Change `ComputeMangedSSLCertificate` is promoted from alpha to beta. Change `CloudIDSEndpoint` is promoted from alpha to beta. Change You can configure the ConfigConnector operator to roll back to install the v1.119.0 controllers by specifying `spec.version: 1.119.0` in the `ConfigConnectorContext` CR (namespaced mode). ## June 18, 2024 Feature Added options to customize resource reconciliation for ConfigConnector - Added a new ControllerReconciler CRD (v1alpha1). See [example](https://github.com/GoogleCloudPlatform/k8s-config-connector/blob/master/operator/config/samples/namespaced_controller_reconciler_customization_sample.yaml). - This feature lets you customize the client-side kube-apiserver request rate limit. Change Added `ComputeServiceAttachment` (v1beta1) resource for service `compute` - Added `ComputeServiceAttachment` as dependency of `ComputeForwardingRule` through `spec.target.serviceAttachmentRef`. Fixed Added three output-only fields for `ContainerCluster` - Added `status.observedState.masterAuth.clusterCaCertificate` - Added `status.observedState.privateClusterConfig.privateEndpoint` - Added `status.observedState.privateClusterConfig.publicEndpoint` Feature The Direct Controller is now the default reconciler - Initialize the Direct Controller registration - Set the default reconciler to Direct Controller if the ConfigConnector CRD does not have `cnrm.cloud.google.com/tf2crd: "true"` or `cnrm.cloud.google.com/dcl2crd: "true"` label. Change Added `CloudBuildWorkerPool` (v1alpha1) resource for service `cloudbuild` Announcement Config Connector version 1.119.0 is now available. Change Added `MonitoringDashboard` (v1beta1) resource for service `monitoring` ## June 04, 2024 Fixed `LoggingLogMetric` - Change `.spec.projectRef.kind` from required to be optional. - If this field is given, it has to be `.spec.projectRef.kind: Project`. Announcement Config Connector version 1.118.2 is now available. ## May 16, 2024 Announcement Config Connector version 1.118.1 is now available. Announcement This release introduces the direct-reconciliation mechanism to reconcile Config Connector resources. The reconciliation makes API calls directly instead of going through a third-party library. Currently it only applies to `LoggingLogMetric`. Fixed `SQLInstance` avoids a bug causing repeated reconciliation when `spec.settings.edition` was configured with a non-empty value. Change Added support for `ComputeNetworkFirewallPolicyRule` resource (v1alpha1). Change `LoggingLogMetric` - Added `spec.loggingLogBucketRef` field to support bucket reference. Change `LoggingLogMetric` now uses direct reconciliation. ## May 13, 2024 Announcement Config Connector version 1.117.0 is now available. Change `VertexAIEndpoint` is promoted from alpha to beta. - Output fields are now in `status.observedState`. - The KMS key is now specified using a reference: `spec.encryptionSpec.kmsKeyNameRef` - The network is now specified using a reference: `spec.networkRef` Change `ComputeNetwork` - The `spec.enableUlaInternalIpv6` field is no longer immutable - it can now be changed without recreating the network. Change `VertexAIDataSet` is promoted from alpha to beta. - Output fields are now in `status.observedState`. - The KMS key is now specified using a reference: `spec.encryptionSpec.kmsKeyNameRef` Announcement This release improves our support for VertexAI. Change `VertexAIIndex` is promoted from alpha to beta. - Output fields are now in `status.observedState`. - Note that `isCompleteOverwrite` is currently not supported: it is not obviously compatible with declarative operation. ## April 17, 2024 Announcement Config Connector version 1.116.0 is now available. Issue An error treats `merge` as invalid value in `cnrm.cloud.google.com/state-into-spec` annotation in `IAMPolicy`, `IAMPartialPolicy`, `IAMPolicyMember`, and `IAMAuditConfig` resources. Upgrading Config Connector to 1.117 or newer versions can fix the issue. Change DNSRecordSet - Added `spec.routingPolicy.geo.healthCheckedTargets` field. - Added `spec.routingPolicy.primaryBackup` field. - Added `spec.routingPolicy.wrr` field. Change ContainerNodePool - Added `spec.nodeConfig.linuxNodeConfig.cgroupMode` field. Announcement This release includes enhanced support for DNSRecordSet, enabling advanced configurations such as geo-routing, primary/backup, and weighted round-robin load-balancing. Change EventArcTrigger - Added `spec.destination.httpEndpoint` field. - Added `spec.destination.networkConfig` field. Change ContainerCluster - Added `spec.nodeConfig.linuxNodeConfig.cgroupMode` field. Change LoggingLogBucket - Added `spec.enableAnalytics` field. ## April 03, 2024 Feature Improved support for AlloyDB, by adding new fields to AlloyDBCluster and AlloyDBInstance. Announcement Config Connector version 1.115.0 is now available. Change AlloyDBCluster - Added `spec.clusterType` field. - Added `spec.deletionPolicy` field. - Added `spec.secondaryConfig` field. Change AlloyDBInstance - Added `spec.instanceTypeRef` field. ## March 28, 2024 Change Initial support (alpha stability) for pausing reconciliation, by setting `spec.actuationMode: Paused` in the ConfigConnectorContext. Change `AccessContextManagerServicePerimeterResource` is promoted from alpha to beta Change GKEHubFeatureMembership - Added `spec.policycontroller` field. Fixed Fixed resource deletion of AlloyDBInstance and EdgeContainerNodePool when their "parent objects" no longer exist. Change Added support for `APIKeysKey` (v1alpha1) resource. Change ComputeTargetHttpsProxy - Added `spec.certificateManagerCertificates` field. Change SQLInstance and ComputeBackendService now have additional safeguards against populating plain-text secrets back into the object. Change BigQueryDataSet - Added `access[].iamMember` field. Change Initial support (alpha stability) for defaulting state-into-spec to absent (the recommended setting), by setting `spec.stateIntoSpec: Absent` in the ConfigConnectorContext. Change DNSRecordSet - Added `spec.routingPolicy` field. Announcement Config Connector version 1.114.1 is now available. Change Added support for `ComputeNetworkFirewallPolicyAssociation` (v1beta1) resource. Change ComputeAddress - Added `status.observedState.address` field. ## February 14, 2024 Announcement Config Connector version 1.113.0 is now available. Feature Initial support for status.observedState in ContainerCluster, ContainerNodePool and RedisInstance. To encourage use of `cnrm.cloud.google.com/state-into-spec: absent`, you can now use status.observedState in ContainerCluster, ContainerNodePool and RedisInstance. Some important resource information (such as the certificate for connecting to a GKE cluster) is currently only available in spec, and we recommend instead reading this resource information from `observedState` if available. More fields may be added to `observedState`in the future. Feature Added support for TagsLocationTagBinding (v1alpha1) resource. Feature Resource RunJob (CloudRun Job): - Added spec.template.vpcAccess.connectorRef field. Feature Added support for ComputeNetworkFirewallPolicy (v1beta1) resource. ## December 06, 2023 Feature Resource BigtableAppProfile(v1beta1): - Added `spec.standardIsolation` field. Feature Added support for `EdgeContainerCluster` (v1beta1) and `EdgeContainerNodePool` (v1beta1) resources. Feature Added support for `EdgeNetworkNetwork` (v1beta1) and `EdgeNetworkSubnet` (v1beta1) resources. Fixed Fixed the SecretKeyRef in the Go client. (Issue [#598](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/598).) Feature Added support for `AlloyDBUser` (v1beta1) resource. Announcement Config Connector version 1.112.0 is now available. ## October 27, 2023 Feature Added name validation for `ValidatingWebhookConfigurationCustomization` and `MutatingWebhookConfigurationCustomization` CRDs. Feature Added support for `AlloyDBBackup` (v1beta1) resource. Feature Resource ContainerNodePool(v1beta1): - Added `spec.nodeConfig.fastSocket` field. Feature Added validation for duplicate webhooks in `spec.webhooks` list of the customizable `ControllerResource` and `NamespacedControllerResource` CRDs. Feature Resource ContainerCluster(v1beta1): - Added `spec.nodeConfig.fastSocket` field. Fixed Fixed an reconciliation issue in ComputeManagedSSLCert resource. Issue [#107](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/107). Feature Resource ComputeTargetHTTPSProxy(v1beta1): - Added `spec.serverTlsPolicyRef` field. Feature Added support for `AlloyDBInstance` (v1beta1) resource. Feature Resource ComputeSubnetwork(v1beta1): - Added `status.internalIpv6Prefix` field. Feature Added support for `ContainerAttachedCluster` (v1beta1) resource. Feature Resource SecretManagerSecretVersion(v1beta1): - Added `spec.isSecretDataBase64` field. Fixed Fixed issue of the retrieved maxWorkers in `DataflowFlexTemplateJob` resource. Feature Resource RunJob(v1beta1): - Added `spec.template.template.vpcAccess.networkInterfaces` field. Feature Added errors on invalid webhook names into status of `ValidatingWebhookConfigurationCustomization` and `MutatingWebhookConfigurationCustomization` custom resources. Fixed Fixed an issue in `ComputeForwardingRule` resource when used with PSC. Issue [#763](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/763). Feature Added support for `AlloyDBCluster` (v1beta1) resource. Feature Resource AlloyDBCluster(v1beta1): - Added `spec.networkConfig` field. Announcement Config Connector version 1.111.0 is now available. Feature Graduated `ValidatingWebhookConfigurationCustomization`, `MutatingWebhookConfigurationCustomization`, `ControllerResource` and `NamespacedControllerResource` CRDs to v1beta1. Feature Resource NetworkConnectivitySpoke(v1beta1): - Added `spec.linkedVPCNetwork` field. Feature Resource RunService(v1beta1): - Added `spec.template.vpcAccess.networkInterfaces` field. ## September 29, 2023 Feature Resource ContainerNodePool(v1beta1): - Added `spec.nodeConfig.confidentialNodes` field. Feature Added `MutatingWebhookConfigurationCustomization` and `ValidatingWebhookConfigurationCustomization` to support the customization on webhook timeouts. Change Resource StorageBucket(v1beta1): - `spec.autoclass.enabled` is now mutable. Feature Resource SecretManagerSecret(v1beta1): - Added `spec.replication.auto` field. Feature Resource DialogflowCXFlow(v1alpha1): - Added `spec.eventHandlers.items.triggerFulfillment.conditionalCases` field. - Added `spec.eventHandlers.items.triggerFulfillment.setParameterActions` field. - Added `spec.eventHandlers.items.triggerFulfillment.messages.items.channel` field. - Added `spec.eventHandlers.items.triggerFulfillment.messages.items.conversationSuccess` field. - Added `spec.eventHandlers.items.triggerFulfillment.messages.items.liveAgentHandoff` field. - Added `spec.eventHandlers.items.triggerFulfillment.messages.items.outputAudioText` field. - Added `spec.eventHandlers.items.triggerFulfillment.messages.items.payload` field. - Added `spec.eventHandlers.items.triggerFulfillment.messages.items.playAudio` field. - Added `spec.eventHandlers.items.triggerFulfillment.messages.items.telephonyTransferCall` field. - Added `spec.transitionRoutes.items.triggerFulfillment.conditionalCases` field. - Added `spec.transitionRoutes.items.triggerFulfillment.setParameterActions` field. - Added `spec.transitionRoutes.items.triggerFulfillment.messages.items.channel` field. - Added `spec.transitionRoutes.items.triggerFulfillment.messages.items.conversationSuccess` field. - Added `spec.transitionRoutes.items.triggerFulfillment.messages.items.liveAgentHandoff` field. - Added `spec.transitionRoutes.items.triggerFulfillment.messages.items.outputAudioText` field. - Added `spec.transitionRoutes.items.triggerFulfillment.messages.items.payload` field. - Added `spec.transitionRoutes.items.triggerFulfillment.messages.items.playAudio` field. - Added `spec.transitionRoutes.items.triggerFulfillment.messages.items.telephonyTransferCall` field. Feature Promoted `CertificateManagerCertificate`, `CertificateManagerCertificateMap`, `CertificateManagerCertificateMapEntry` and `CertificateManagerDNSAuthorization` from `v1alpha1` to `v1beta1`. Feature Resource ComputeInstanceTemplate(v1beta1): - Added `spec.networkInterface.items.internalIpv6PrefixLength` field. - Added `spec.networkInterface.items.ipv6Address` field. Feature Resource ContainerCluster(v1beta1): - Added `spec.enableFqdnNetworkPolicy` field. - Added `spec.nodeConfig.confidentialNodes` field. Feature Resource RunJob(v1beta1): - `spec.template.template.volumes[].secret.items[].mode` is now optional. Feature Resource VertexAIIndexEndpoint(v1alpha1): - Added `spec.publicEndpointEnabled` field. - Added `status.publicEndpointDomainName` field. Feature Resource DialogflowCXPage(v1alpha1): - Added `spec.entryFulfillment.conditionalCases` field. - Added `spec.entryFulfillment.setParameterActions` field. - Added `spec.entryFulfillment.messages.items.channel` field. - Added `spec.entryFulfillment.messages.items.conversationSuccess` field. - Added `spec.entryFulfillment.messages.items.liveAgentHandoff` field. - Added `spec.entryFulfillment.messages.items.outputAudioText` field. - Added `spec.entryFulfillment.messages.items.payload` field. - Added `spec.entryFulfillment.messages.items.playAudio` field. - Added `spec.entryFulfillment.messages.items.telephonyTransferCall` field. - Added `spec.eventHandlers.items.triggerFulfillment.conditionalCases` field. - Added `spec.eventHandlers.items.triggerFulfillment.setParameterActions` field. - Added `spec.eventHandlers.items.triggerFulfillment.messages.items.channel` field. - Added `spec.eventHandlers.items.triggerFulfillment.messages.items.conversationSuccess` field. - Added `spec.eventHandlers.items.triggerFulfillment.messages.items.liveAgentHandoff` field. - Added `spec.eventHandlers.items.triggerFulfillment.messages.items.outputAudioText` field. - Added `spec.eventHandlers.items.triggerFulfillment.messages.items.payload` field. - Added `spec.eventHandlers.items.triggerFulfillment.messages.items.playAudio` field. - Added `spec.eventHandlers.items.triggerFulfillment.messages.items.telephonyTransferCall` field. - Added `spec.form.parameters.items.defaultValue` field. - Added `spec.form.parameters.items.fillBehavior.repromptEventHandlers` field. - Added `spec.form.parameters.items.fillBehavior.initialPromptFulfillment.conditionalCases` field. - Added `spec.form.parameters.items.fillBehavior.initialPromptFulfillment.setParameterActions` field. - Added `spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.channel` field. - Added `spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.conversationSuccess` field. - Added `spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.liveAgentHandoff` field. - Added `spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.outputAudioText` field. - Added `spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.payload` field. - Added `spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.playAudio` field. - Added `spec.form.parameters.items.fillBehavior.initialPromptFulfillment.messages.items.telephonyTransferCall` field. - Added `spec.transitionRoutes.items.triggerFulfillment.conditionalCases` field. - Added `spec.transitionRoutes.items.triggerFulfillment.setParameterActions` field. - Added `spec.transitionRoutes.items.triggerFulfillment.messages.items.channel` field. - Added `spec.transitionRoutes.items.triggerFulfillment.messages.items.conversationSuccess` field. - Added `spec.transitionRoutes.items.triggerFulfillment.messages.items.liveAgentHandoff` field. - Added `spec.transitionRoutes.items.triggerFulfillment.messages.items.outputAudioText` field. - Added `spec.transitionRoutes.items.triggerFulfillment.messages.items.payload` field. - Added `spec.transitionRoutes.items.triggerFulfillment.messages.items.playAudio` field. - Added `spec.transitionRoutes.items.triggerFulfillment.messages.items.telephonyTransferCall` field. Feature Added value validation for resource requests and limits in the customizable `ControllerResource` and `NamespacedControllerResource` CRDs. Feature Resource SecretManagerSecretVersion(v1beta1): - Added `spec.deletionPolicy` field. Feature Resource ComputeInstance(v1beta1): - Added `spec.networkInterface.items.internalIpv6PrefixLength` field. - Added `spec.networkInterface.items.ipv6Address` field. Feature Promoted `RunService` from `alpha` stability to `stable` stability. - Renamed field `spec.template.containerConcurrency` to `spec.template.maxInstanceRequestConcurrency`. - Fixed the IAM support by removing the support of "IAM conditions" on this resource. - Removed field `status.resourceGeneration`. Announcement Config Connector version 1.110.0 is now available. Feature Resource BigQueryTable(v1beta1): - Added `spec.tableConstraints` field. - Added `spec.materializedView.allowNonIncrementalDefinition` field. ## September 06, 2023 Fixed Resource BigtableGCPolicy(v1beta1): - Fixed a bug that generates unexpected diff when `mode` and `gcRules` are both specified. - Fixed a bug that generates unexpected diff when `maxAge` in `gcRules` is specified with units larger than hours. Feature Resource CloudFunctions2Function(v1alpha1): - Added `spec.kmsKeyName` field. Feature Added support for `ComputeRegionSSLPolicy` (v1alpha1) resource. Feature Resource ArtifactRegistryRepository(v1beta1): - Added `spec.cleanupPolicies` field. - Added `spec.cleanupPolicyDryRun` field. Feature Added name validation for the customizable ControllerResource CRDs. Feature Resource ComputeAddress(v1beta1): - Added `spec.ipv6EndpointType` field. Feature Resource RunJob(v1beta1): - Added `status.createTime` field. - Added `status.creator` field. - Added `status.deleteTime` field. - Added `status.expireTime` field. - Added `status.lastModifier` field. - Added `status.updateTime` field. Feature - Added support for `CloudIOTDeviceRegistry` (v1alpha1) resource. Feature Resource WorkstationsWorkstationCluster(v1alpha1): - Added `spec.privateClusterConfig.allowedProjects` field. Feature Resource SpannerDatabase(v1beta1): - Added `spec.enableDropProtection` field. Feature Resource BigQueryTable(v1beta1): - Added `spec.maxStaleness` field. - Added `spec.externalDataConfiguration.fileSetSpecType` field. Feature Resource ContainerCluster(v1beta1): - Added `spec.allowNetAdmin` field. - Added `spec.enableK8sBetaApis` field. - Added `spec.enableMultiNetworking` field. - Added `spec.ipAllocationPolicy.additionalPodRangesConfig` field. - Added `spec.monitoringConfig.advancedDatapathObservabilityConfig` field. - Added `spec.nodeConfig.hostMaintenancePolicy` field. Feature Resource ComputeBackendService(v1beta1): - Added `spec.securityPolicy` field. - Added `spec.connectionTrackingPolicy.enableStrongAffinity` field. Feature Resource AlloyDBCluster(v1alpha1): - Added `spec.continuousBackupConfig` field. - Added `spec.restoreBackupSource` field. - Added `spec.restoreContinuousBackupSource` field. - Added `status.continuousBackupInfo` field. Feature Resource MonitoringAlertPolicy(v1beta1): - Added `spec.conditions.items.conditionPrometheusQueryLanguage` field. Feature Resource PubSubSubscription(v1beta1): - Added `spec.cloudStorageConfig` field. - Added `spec.pushConfig.noWrapper` field. Feature Resource SQLInstance(v1beta1): - Added `spec.settings.ipConfiguration.pscConfig` field. - Added `status.dnsName` field. - Added `status.pscServiceAttachmentLink` field. Fixed Fixed `spec.webhookConfig.secretRef` field in CloudBuildTrigger. Feature Resource ComputeTargetPool(v1beta1): - Added `spec.securityPolicyRef` field. Feature Resource DNSManagedZone(v1beta1): - Removed `spec.privateVisibilityConfig.required` field. Feature Resource FirebaseAndroidApp(v1alpha1): - Added `spec.apiKeyId` field. Feature Resource HealthcareFHIRStore(v1alpha1): - Added `spec.defaultSearchHandlingStrict` field. - Added `spec.notificationConfigs.items.sendPreviousResourceOnDelete` field. - Added `spec.streamConfigs.items.bigqueryDestination.schemaConfig.lastUpdatedPartitionConfig` field. Feature Resource IAMWorkforcePoolProvider(v1beta1): - Added `spec.oidc.clientSecret` field. - Added `spec.oidc.jwksJson` field. - Added `spec.oidc.webSsoConfig.additionalScopes` field. - Added `status.oidc` field. Change Field `spec.containers` is no longer required in the customizable ControllerResource CRDs. Announcement Config Connector version 1.109.0 is now available. Feature Resource EventarcTrigger(v1beta1): - Added `spec.eventDataContentType` field. Feature Resource ComputeTargetInstance(v1beta1): - Added `spec.securityPolicyRef` field. Feature Added support for `VertexAIIndexEndpoint` (v1alpha1) resource. Feature Resource ContainerNodePool(v1beta1): - Added `spec.networkConfig.additionalNodeNetworkConfigs` field. - Added `spec.networkConfig.additionalPodNetworkConfigs` field. - Added `spec.nodeConfig.hostMaintenancePolicy` field. - Added `spec.placementPolicy.policyNameRef` field. Feature Resource ComputeSecurityPolicy(v1beta1): - Added `spec.advancedOptionsConfig.userIpRequestHeaders` field. Feature Resource ComputeInstanceTemplate(v1beta1): - Added `spec.disk.items.provisionedIops` field. - Added `spec.networkInterface.items.ipv6AccessConfig.items.name` field. - Added `spec.scheduling.localSsdRecoveryTimeout` field. Feature Resource CloudBuildTrigger(v1beta1): - Added `spec.gitFileSource.bitbucketServerConfigRef` field. - Added `spec.sourceToBuild.bitbucketServerConfigRef` field. Feature Resource ComputeInstance(v1beta1): - Added `spec.networkInterface.items.ipv6AccessConfig.items.name` field. - Added `spec.scheduling.localSsdRecoveryTimeout` field. Feature Resource SecretManagerSecret(v1beta1): - Added `spec.annotations` field. - Added `spec.versionAliases` field. Feature Resource FirebaseWebApp(v1alpha1): - Added `spec.apiKeyId` field. ## August 21, 2023 Feature Resource ComputeURLMap(v1beta1): - Added `spec.pathMatcher.items.routeRules.items.matchRules.items.pathTemplateMatch` field. - Added `spec.pathMatcher.items.routeRules.items.routeAction.urlRewrite.pathTemplateRewrite` field. Feature Resource ComputeTargetHTTPProxy(v1beta1): - Added `spec.httpKeepAliveTimeoutSec` field. Feature Resource HealthcareFHIRStore(v1alpha1): - Added `spec.complexDataTypeReferenceParsing` field. Feature Resource ContainerNodePool(v1beta1): - Added `spec.nodeConfig.guestAccelerator.items.gpuDriverInstallationConfig` field. - Added `spec.nodeConfig.soleTenantConfig` field. - Added `spec.placementPolicy.tpuTopology` field. Feature Resource BigQueryTable(v1beta1): - Added `spec.externalDataConfiguration.jsonOptions` field. - Added `spec.externalDataConfiguration.metadataCacheMode` field. - Added `spec.externalDataConfiguration.objectMetadata` field. - Added `spec.externalDataConfiguration.parquetOptions` field. Feature Resource CloudFunctions2Function(v1alpha1): - Added `status.url` field. Feature Resource ComputeTargetHTTPSProxy(v1beta1): - Added `spec.httpKeepAliveTimeoutSec` field. Feature Resource ComputeDisk(v1beta1): - Added `spec.enableConfidentialCompute` field. - Added `spec.provisionedThroughput` field. Feature Resource ComputeInstanceTemplate(v1beta1): - Added `spec.networkInterface.items.networkAttachment` field. Feature Added support for customization on `cnrm-controller-manager` pods resource requests/limits in namespaced mode. Feature Added support for customization on `cnrm-unmanaged-detector` pods resource requests/limits. Feature Resource RedisInstance(v1beta1): - Added `status.maintenanceSchedule` field. Feature Resource GKEBackupBackupPlan(v1alpha1): - Added `status.state` field. - Added `status.stateReason` field. Feature Resource BigtableTable(v1beta1): - Added `spec.changeStreamRetention` field. Feature Resource VertexAIFeaturestoreEntityTypeFeature(v1alpha1): - Added `status.region` field. Feature Resource ComputeExternalVPNGateway(v1beta1): - Added `status.labelFingerprint` field. Feature Added support for `BigQueryReservationCapacityCommitment` resource(v1alpha1). Feature Resource SQLInstance(v1beta1): - Added `spec.settings.dataCacheConfig` field. - Added `spec.settings.edition` field. Feature Resource CertificateManagerCertificate(v1alpha1): - Added `spec.managed.issuanceConfig` field. Feature Resource ComputeInstance(v1beta1): - Added `spec.params` field. - Added `spec.bootDisk.initializeParams.resourceManagerTags` field. Feature Resource DataformRepository(v1alpha1): - Added `spec.workspaceCompilationOverrides` field. Feature Resource ContainerCluster(v1beta1): - Added `spec.nodeConfig.guestAccelerator.items.gpuDriverInstallationConfig` field. - Added `spec.nodeConfig.soleTenantConfig` field. - Added `spec.securityPostureConfig` field. Feature Resource ComputeForwardingRule(v1beta1): - Added `spec.noAutomateDnsZone` field. Feature Resource VertexAIIndex(v1alpha1): - Added `spec.metadata.config.shardSize` field. Feature Resource RunJob(v1beta1): - Added `spec.annotations` field. - Added `spec.template.annotations` field. Feature Resource BigQueryDataset(v1beta1): - Added `spec.storageBillingModel` field. Announcement Config Connector version 1.108.0 is now available. ## August 01, 2023 Feature Resource DataflowFlexTemplateJob(v1beta1): - Added `spec.additionalExperiments` field. - Added `spec.autoscalingAlgorithm` field. - Added `spec.enableStreamingEngine` field. - Added `spec.ipConfiguration` field. - Added `spec.kmsKeyNameRef` field. - Added `spec.launcherMachineType` field. - Added `spec.machineType` field. - Added `spec.maxWorkers` field. - Added `spec.networkRef` field. - Added `spec.numWorkers` field. - Added `spec.sdkContainerImage` field. - Added `spec.serviceAccountEmailRef` field. - Added `spec.stagingLocation` field. - Added `spec.subnetworkRef` field. - Added `spec.tempLocation` field. - Added `spec.transformNameMapping` field. Announcement Config Connector version 1.107.0 is now available. Feature Added `GOMEMLIMIT` environment variable (default value is set to 110MiB) to the `webhook` container in `cnrm-webhook-manager`. It sets a runtime memory limit for the `webhook` container, which helps in GC-related out-of-memory ("OOM") situations. Change Optimized HPA rule for `cnrm-webhook-manager` with `targetCPUUtilizationPercentage` adjusted from 90 to 70. Feature Resource BigQueryDataset(v1beta1): - Added `spec.access.routine` field. Feature Added support for customization on `cnrm-webhook-manager` pod replicas. ## July 11, 2023 Feature Resource MonitoringAlertPolicy(v1beta1): - Added `spec.alertStrategy.notificationChannelStrategy` field. - Added `spec.conditions.items.conditionThreshold.forecastOptions` field. Feature Resource ComputeImage(v1beta1): - Added `spec.storageLocations` field. Feature Resource SQLInstance(v1beta1): - Added `spec.settings.advancedMachineFeatures` field. Feature Added support for KMS key deletion when being orphaned. Change Disabled `abandon-on-uninstall` webhook. Feature Added support for customization on `cnrm-webhook-manager`, `cnrm-controller-manager`, `cnrm-resource-stats-recorder` and `cnrm-deletiondefenderpods` resource requests/limits. Feature Added support for `RunJob` resource. Feature Resource VPCAccessConnector(v1beta1): - Added `status.selfLink` field. Feature Resource DataflowFlexTemplateJob(v1beta1): - Added `status.type` field. Announcement Config Connector version 1.106.0 is now available. Feature Resource DatastreamStream(v1alpha1): - Added `spec.sourceConfig.mysqlSourceConfig.maxConcurrentBackfillTasks` field. Feature Resource GKEHubFeature(v1beta1): - Added `spec.spec.fleetobservability` field. Feature Resource StorageTransferJob(v1beta1): - Added `spec.transferSpec.awsS3DataSource.path` field. Change Optimized HPA rule for `cnrm-webhook-manager` with new memory targetAverageUtilization. Feature Resource ComputeDisk(v1beta1): - Added `spec.guestOsFeatures` field. - Added `spec.licenses` field. ## May 26, 2023 Feature Resource CertificateManagerCertificate(v1alpha1): - Added `spec.location` field. Feature Resource VertexAIEndpoint(v1alpha1): - Added `spec.region` field. Feature Resource ComputeRouterPeer(v1beta1): - Added `spec.enableIpv6` field. - Added `spec.ipv6NexthopAddress` field. - Added `spec.peerIpv6NexthopAddress` field. Feature Resource ContainerCluster(v1beta1): - Added `spec.addonsConfig.gcsFuseCsiDriverConfig` field. Announcement Config Connector version 1.105.0 is now available. Feature Resource AlloyDBCluster(v1alpha1): - Added `spec.encryptionConfig` field. - Added `spec.automatedBackupPolicy.encryptionConfig` field. - Added `status.encryptionInfo` field. Feature Resource WorkflowsWorkflow(v1alpha1): - Added `spec.cryptoKeyName` field. Feature Resource ComputeBackendService(v1beta1): - Added `spec.cdnPolicy.bypassCacheOnRequestHeaders` field. Feature Resource ComputeNetworkPeering(v1beta1): - Added `spec.stackType` field. Feature Resource ComputeResourcePolicy(v1beta1): - Added `spec.diskConsistencyGroupPolicy` field. Fixed Fixed the issue that the SecretManagerSecretVersion resource stuck in `DeleteFailed` state when it's deleted after the referenced SecretManagerSecret is deleted. Feature Resource WorkstationsWorkstationCluster(v1alpha1): - Added `status.resourceConditions` field. - Restructured `status.conditions` field to be consistent with `status.conditions` field of any Config Connector kind. Feature Resource ComputeDisk(v1beta1): - Added `spec.asyncPrimaryDisk.diskRef` field. Feature Resource BigQueryJob(v1beta1): - Added `spec.load.parquetOptions` field. Feature Resource ComputeForwardingRule(v1beta1): - Added `spec.allowPscGlobalAccess` field. - Added `spec.sourceIpRanges` field. - Added `status.baseForwardingRule` field. Feature Resource CloudBuildTrigger(v1beta1): - Added `spec.build.step.items.allowExitCodes` field. - Added `spec.build.step.items.allowFailure` field. - Added `spec.gitFileSource.repositoryRef` field. - Added `spec.sourceToBuild.repositoryRef` field. Feature Resource AlloyDBBackup(v1alpha1): - Added `spec.encryptionConfig` field. - Added `status.encryptionInfo` field. ## May 09, 2023 Announcement Config Connector version 1.104.0 is now available. Fixed Config Connector CLI tool will now export cluster information for `BigTableInstance`. Fixed Resources with a reconcile period of 0 will no longer attempt to reconcile when pods are recreated ([#795](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/795)). Feature Resource IAMWorkforcePoolProvider(v1beta1): - Added `spec.oidc.webSsoConfig` field. Feature Resource ComputeFirewallPolicyRule(v1beta1): - Added `spec.match.destAddressGroups` field. - Added `spec.match.destFqdns` field. - Added `spec.match.destRegionCodes` field. - Added `spec.match.destThreatIntelligences` field. - Added `spec.match.srcAddressGroups` field. - Added `spec.match.srcFqdns` field. - Added `spec.match.srcRegionCodes` field. - Added `spec.match.srcThreatIntelligences` field. ## April 26, 2023 Announcement Config Connector version 1.103.0 is now available. Fixed Fixed set blockOwnerDeletion failures for OwnerReferencesPermissionEnforcement enabled clusters ([#797](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/797)). Feature Resource ComputeNetwork(v1beta1): - Added `spec.networkFirewallPolicyEnforcementOrder` field. Feature Added support for [manual installation](https://docs.cloud.google.com/config-connector/docs/how-to/advanced-install#manual) in GKE Autopilot. Feature Resource ArtifactRegistryRepository(v1beta1): - Added `spec.dockerConfig` field. Feature Added 136 v1alpha1 Google Cloud resource CRDs. See [Install instructions](https://docs.cloud.google.com/config-connector/docs/how-to/install-alpha-crds) for more information. Feature Resource ComputeInstanceTemplate(v1beta1): - Added `status.selfLinkUnique` field. Fixed Issue in resource `PrivateCACAPool` to support setting `maxIssuerPathLength` field as 0. Feature Resource ComputeVPNGateway(v1beta1): - Added `spec.stackType` field. Feature Resource BigQueryDataset(v1beta1): - Added `spec.defaultCollation` field. - Added `spec.isCaseInsensitive` field. Change Optimized ratelimiter for `IAMPolicyMember` controller to make sure new resources get reconciled timely. Feature Resource ComputeInstance(v1beta1): - Added `spec.scratchDisk.items.size` field. Feature Resource StorageTransferJob(v1beta1): - Added `spec.transferSpec.objectConditions.lastModifiedBefore` field. - Added `spec.transferSpec.objectConditions.lastModifiedSince` field. Feature Resource PrivateCACertificateAuthority(v1beta1): - Added `spec.config.x509Config.caOptions.zeroMaxIssuerPathLength` field. Feature Resource ContainerCluster(v1beta1): - Added `spec.ipAllocationPolicy.podCidrOverprovisionConfig` field. - Added `spec.ipAllocationPolicy.stackType` field. - Added `spec.nodeConfig.advancedMachineFeatures` field. - Added `spec.nodeConfig.ephemeralStorageLocalSsdConfig` field. - Added `spec.nodeConfig.localNvmeSsdBlockConfig` field. Feature Resource PrivateCACAPool(v1beta1): - Added `spec.issuancePolicy.baselineValues.caOptions.zeroMaxIssuerPathLength` field. Feature Resource ContainerNodePool(v1beta1): - Added `spec.networkConfig.podCidrOverprovisionConfig` field. - Added `spec.nodeConfig.advancedMachineFeatures` field. - Added `spec.nodeConfig.ephemeralStorageLocalSsdConfig` field. - Added `spec.nodeConfig.localNvmeSsdBlockConfig` field. ## March 30, 2023 Fixed Fixed a bug causing diff detection on `reservedIpRange` field in `RedisInstance`. Feature Added `spec.kubeletConfig.podPidsLimit` field to ContainerCluster. Feature Added `spec.kubeletConfig.podPidsLimit` field to ContainerNodePool. Feature Added `scheduling.maintenanceInterval` field to `ComputeInstanceTemplate`. Feature Added `groupPlacementPolicy.maxDistance` field to `ComputeResourcePolicy`. Feature Introduced [configurable reconciliation interval](https://docs.cloud.google.com/config-connector/docs/concepts/reconciliation#configuring_the_reconciliation_interval) feature. Feature Added `mode`, `remoteRepositoryConfig`, `virtualRepositoryConfig` fields to ArtifactRegistryRepository Feature Added `spec.rateLimitOptions.enforceOnKeyConfigs` field to ComputeSecurityPolicy. Feature Added `transferSpec.sinkAgentPoolName`, `transferSpec.sourceAgentPoolName` fields to `StorageTransferJob`. Announcement Config Connector version 1.102.0 is now available. Feature Added `scheduling.maintenanceInterval` field to `ComputeInstance`. Feature Added support for `IAMAccessBoundaryPolicy` resource. Feature Added `spec.instanceType` field to SQLInstance. Feature Added `deletionPolicy` field to `ComputeSharedVPCServiceProject`. Feature Added `protectConfig` field to `ContainerCluster`. Feature Added `spec.diskEncryptionKey.rsaEncryptedKey` field to ComputeDisk. Feature Added `spec.bitbucketServerTriggerConfig`, `spec.github.enterpriseConfigResourceNameRef` fields to CloudBuildTrigger. ## February 21, 2023 Fixed Disabled fast dependency reconciliation during resource deletion. Feature Added `spec.externalDataConfiguration.referenceFileSchemaUri` field to `BigQueryTable`. Feature Added `spec.edgeSecurityPolicyRef` and `spec.localityLbPolicies` fields to `ComputeBackendService`. Deprecated Removed `GameServicesRealm` resource. Feature Added `spec.memberFrom.serviceIdentityRef` field to `IAMPolicyMember` ([#722](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/722)). Feature Added `spec.adaptiveProtectionConfig.autoDeployConfig` field to `ComputeSecurityPolicy`. Change Graduated the following resources from `alpha` to `stable`: `NetworkServicesGateway`, `NetworkServicesGRPCRoute`, `NetworkServicesHTTPRoute`, `NetworkServicesMesh`, `NetworkServicesTCPRoute`, `NetworkServicesTLSRoute`. Feature Added `spec.bindings.members.memberFrom.serviceIdentityRef` field to `IAMPartialPolicy` ([#722](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/722)). Feature Added `spec.scheduling.maxRunDuration` field to `ComputeInstance`. Fixed `spec.settings.diskType` is now immutable in `SQLInstance`. Change Adjusted default reconciliation interval for the following resources: - `BigtableInstance`: 3600 seconds (1 hour) - `BigtableTable`: 3600 seconds (1 hour) - `ServiceUsage`: 3600 seconds (1 hour) - `ComputeSslCertificate`: 0 seconds (This resource does not support any updates) Feature Added `spec.shareSettings` field to `ComputeNodeGroup`. Announcement Config Connector version 1.101.0 is now available. Feature Added `spec.resourcePolicies` and `spec.scheduling.maxRunDuration` fields to `ComputeInstanceTemplate`. Feature Added `spec.gitFileSource.githubEnterpriseConfigRef`, `spec.repositoryEventConfig` and `spec.sourceToBuild.githubEnterpriseConfigRef` fields to `CloudBuildTrigger`. Fixed Fixed a bug that could cause controllers to become stuck on an outdated CRD version. Feature Added `spec.tcpTimeWaitTimeoutSec` field to `ComputeRouterNAT` ([#692](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/692)). Feature Added `spec.ipConfiguration.enablePrivatePathForGoogleCloudServices` field to `SQLInstance`. ## January 25, 2023 Feature Added support for `TagsTagBinding` resource. This resource has been auto-generated and is in `alpha` stability. Feature Added fields `spec.disk.sourceImageEncryptionKey`, `spec.disk.sourceSnapshotRef`, and `spec.disk.sourceSnapshotEncryptionKey` in `ComputeInstanceTemplate`. Feature Added support for ServiceIdentity resource ([#728](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/728)). Feature Added support for `IAMPolicy`, `IAMPartialPolicy` and `IAMPolicyMember` in `DNSManagedZone`. Feature Added field `spec.routerApplianceInstanceRef` in `ComputeRouterPeer`. Feature Added fields `spec.settings.deletionProtectionEnabled` and `status.instanceType` in `SQLInstance` ([#748](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/748)). Feature Added field `spec.imagedEncryptionKey` in `ComputeImage`. Announcement Config Connector version 1.100.0 is now available. Feature Added support for `PubSubLiteReservation` resource. Feature Added support for `BigQueryRoutine` resource. This resource has been auto-generated and is in `alpha` stability ([#739](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/739)). Fixed Field `spec.settings.sqlServerAuditConfig.bucketRef` is no longer required in `SQLInstance`. Feature Added field `status.generatedId` in `ComputeBackendService`. Feature Extended event-driven reconciliation support to `IAMPolicyMember`. Fixed `abandon-on-uninstall` webhook will now ignore non-Config Connector CRDs ([#758](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/758)). Feature Added field `status.expireTime` in `ComputeSSLCertificate`. ## January 06, 2023 Feature Added fields `spec.networkConfig.enablePrivateNodes`, `spec.nodeConfig.loggingVariant`, `spec.nodeConfig.resourceLabels`, `spec.upgradeSettings.blueGreenSettings`, `spec.upgradeSettings.stategy` in ContainerNodePool. Change Field `spec.ipv6AccessType` in ComputeSubnetwork has become mutable. Feature Added field `spec.mesh.controlPlane` in GKEHubFeatureMembership. Feature Added field `spec.deletionPolicy` in BigtableGCPolicy. Change Field `spec.labels` in CloudIdentityGroup has become mutable. Feature Supported the regional `spec.defaultRouteAction.requestMirrorPolicy.backendServiceRef`, `spec.defaultRouteAction.weightedBackendServices.backendServiceRef` for the regional ComputeURLMap resources. Feature Added support for `DataCatalogPolicyTag` resource. This resource has been auto-generated and is in `alpha` stability. Feature Added support for `TagsTagKey` resource. This resource has been auto-generated and is in `alpha` stability. Feature Added fields `spec.clusterAutoscaling.autoProvisioningDefaults.management`, `spec.clusterAutoscaling.autoProvisioningDefaults.shieldedInstanceConfig` `spec.clusterAutoscaling.autoProvisioningDefaults.upgradeSettings`, `spec.gatewayApiConfig`, `spec.masterAuthorizedNetworksConfig.gcpPublicCidrsAccessEnabled`, `spec.nodeConfig.loggingVariant`, `spec.nodeConfig.resourceLabels`, `spec.nodePoolDefaults.nodeConfigDefaults.loggingVariant`, `spec.privateClusterConfig.privateEndpointSubnetworkRef` in ContainerCluster. Feature Added field `spec.skipAwaitRollout` in OSConfigOSPolicyAssignment. Announcement Config Connector version 1.99.0 is now available. Deprecated Removed field `spec.authorizationPolicyRef` in NetworkServicesGateway (Alpha). Feature Added fields `spec.privateIpAddressRef`, `spec.redundantInterfaceRef`, `spec.subnetworkRef` in ComputeRouterInterface. Feature Extended faster reconciliation of resources with dependencies to support IAMPartialPolicy. Feature Added fields `spec.configmanagement.oci` and `spec.mesh.controlPlane` in GKEHubFeatureMembership. Feature Added fields `spec.settings.connectorEnforcement`, `spec.settings.denyMaintenancePeriod`, `spec.settings.insightsConfig.queryPlansPerMinute` in SQLInstance. Feature Added field `spec.deletionProtection` in BigtableTable. Feature Added field `spec.privateVisibilityConfig.gkeClustersRef` in DNSManagedZone. Feature Added field `spec.autoclass` in StorageBucket. Feature Added field `spec.deletionPolicy` in SQLDatabase. Fixed Fixed export error for `IAMCustomRole` in `config-connector` CLI with `--resource-format=terraform`. Feature Added support for `TagsTagValue` resource. This resource has been auto-generated and is in `alpha` stability. Feature Added field `spec.cdnPolicy.cacheKeyPolicy.includeHttpHeaders` in ComputeBackendService. Feature Added fields `spec.recaptchaOptionsConfig`, `spec.rule.headerAction`, `spec.rule.preconfiguredWafConfig` in ComputeSecurityPolicy. ## December 13, 2022 Announcement Config Connector version 1.98.0 is now available. Feature Added `spec.build.step.script` to `CloudBuildTrigger`. Feature Added `spec.clusterAutoscaling.autoProvisioningDefaults.diskSize` to `ContainerCluster`. Feature Added `status.member` to `IAMServiceAccount`. Fixed Added mutation support to `spec.nodeConfig.tags` in `ContainerCluster`. Feature Added `spec.settings.timeZone` to `SQLInstance`. Feature Added `spec.maxTimeTravelHours` to `BigQueryDataset`. Fixed Fixed `spec.datapathProvider` in `ContainerCluster` by making it immutable. Fixed Fixed `spec.schemaSettings.encoding` in `PubSubTopic` by making it immutable ([#698](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/698)). Feature Added `spec.sourceDiskRef` and `status.sourceDiskId` to `ComputeDisk`. Feature Added `spec.rules` to `ComputeRouterNAT`. Feature Added support for `DataCatalogTaxonomy` resource. This resource has been auto-generated and is in `alpha` stability. ## November 15, 2022 Feature Added `spec.compressionMode` to `ComputeBackendBucket`. Feature Added `spec.passwordPolicy` to `SQLUser`. Feature Added `spec.load.jsonExtension` to `BigQueryJob`. Feature Added `spec.cloudLoggingConfig` to `DNSManagedZone`. Announcement Config Connector version 1.97.0 is now available. Feature Added support for `DLPJobTrigger` resource. Feature Added `spec.managementConfig.fullManagementConfig` to `ConfigControllerInstance`. Feature Added `spec.maintenanceVersion` and `status.availableMaintenanceVersions` to `SQLInstance`. Fixed Moved `SQLUser` output-only field `sqlServerUserDetails` from `spec` to `status`. Feature Added `spec.customPlacementConfig` to `StorageBucket`. Feature Added `spec.persistenceConfig` to `RedisInstance`. Feature Added `spec.compressionMode` to `ComputeBackendService`. Feature Added `spec.gcRules` to `BigtableGCPolicy` (Issues [#624](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/624), [#542](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/542), [#482](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/482), [#345](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/345), [#300](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/300)). Feature Added `spec.config.dataprocMetricConfig`, `spec.config.gceClusterConfig.confidentialInstanceConfig`, `spec.config.gceClusterConfig.shieldedInstanceConfig`, `spec.config.masterConfig.diskConfig.localSsdInterface`, `spec.config.metastoreConfig.dataprocMetastoreServiceRef`, `spec.config.secondaryWorkerConfig.diskConfig.localSsdInterface`, `spec.config.securityConfig`, `spec.config.workerConfig.diskConfig.localSsdInterface` and `spec.virtualClusterConfig` to `DataprocCluster`. Feature Added `status.version` to `SecretManagerSecretVersion`. Feature Added `spec.notificationConfig` to `StorageTransferJob` (Issue [#303](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/303)). Feature Added `spec.externalDataConfiguration.avroOptions` to `BigQueryTable`. Feature Added `spec.nodeConfig.guestAccelerator[].gpuSharingConfig` to `ContainerNodePool`. Feature Added `spec.advancedOptionsConfig.jsonCustomConfig` to `ComputeSecurityPolicy`. Feature Added `spec.nodeConfig.guestAccelerator[].gpuSharingConfig` and `spec.notificationConfig.pubsub.filter` to `ContainerCluster`. ## October 26, 2022 Announcement Config Connector version 1.96.0 is now available. Feature Added `costManagementConfig`, `nodePoolDefaults`, `serviceExternalIpsConfig` to `ContainerCluster`. Feature Added `storageTarget` to `BigTableInstance` (Issue [#729](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/729)). Feature Added `chainName` to `ComputeSnapshot`. Feature Added support for `DLPInspectTemplate` resource. Feature Added `visibleCoreCount` to `ComputeInstanceTemplate`. Feature Added `location` and `BITBUCKET` support to `CloudBuildTrigger` (Issue [#672](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/672)). Feature Released new controller `unmanaged-detector`. Now if there is no Config Connector controller for a resource's namespace, that resource's status will show as "Unmanaged". Feature Extended faster reconciliation of resources with dependencies to support `IAMAuditConfig` and `IAMPolicy`. Deprecated Removed `labels` field from `NetworkServicesGateway` (alpha), `NetworkServicesGRPCRoute` (alpha), `NetworkServicesHTTPRoute` (alpha), `NetworkServicesMesh` (alpha), and `NetworkServicesTCPRoute` (alpha). Fixed Fixed issue with `DataprocCluster` where resource creation was failing with error message `Update call failed: error applying desired state: infeasible update: ({true }) would require recreation` (Issue [#661](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/661)). Feature Added `forceDelete` to `MonitoringNotificationChannel`. Feature Added `locationPolicy`, `totalMaxNodeCount`, `totalMinNodeCount` to `ContainerNodePool`. Feature Added `channelRef` and `resourceConditions` to `EventarcTrigger`. Feature Added `snapshotProperties.chainName` to `ComputeResourcePolicies`. Feature Added `mesh` to `GKEHubFeatureMembership`. Feature Added `visibleCoreCount` to `ComputeInstance`. Feature Added `certificateMapRef` to `ComputeTargetSSLProxy`. ## September 27, 2022 Announcement Config Connector version 1.95.0 is now available. Change Added `enableServiceLinks: false` to all the Pod configurations in Config Connector installation bundle. This is to fix the potential issue `standard_init_linux.go:228: exec user process caused: argument list too long` in Config Connector Pods. Feature Added support for `DLPDeidentifyTemplate` resource. ## September 14, 2022 Deprecated Removed `spec.routers` in `NetworkServicsGRPCRoute` (alpha) and `NetworkServicsTCPRoute` (alpha). Change Removed the validation on `spec.cluster.numNodes` \> 0 in `BigtableInstance` (Issue [#673](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/673)). Feature Added `spec.memberFrom.sqlInstanceRef` field to `IAMPolicyMember` (Issue [#689](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/689)). Feature Added `spec.bindings[].members[].memberFrom.sqlInstanceRef` field to `IAMPartialPolicy` (Issue [#689](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/689)). Feature Added `spec.nodeConfig.reservationAffinity` to `ContainerCluster`. Feature Added `spec.nodePoolAutoConfig` to `ContainerCluster`. Change Added support for major version upgrades to `SQLInstance` (`spec.databaseVersion` is now mutable). Change In `NetworkServicesGateway` (alpha), updated `spec.authorizationPolicy` to `spec.authorizationPolicyRef`, and updated `spec.serverTlsPolicy` to `spec.serverTlsPolicyRef`. Deprecated Removed `spec.routers` and `spec.rules.action.originalDestination` in `NetworkServicsHTTPRoute` (alpha). Feature Added `spec.nodeConfig.reservationAffinity` to `ContainerNodePool`. Announcement Config Connector version 1.94.0 is now available. Feature Extended support for value `absent` in [`state-into-spec`](https://docs.cloud.google.com/config-connector/docs/concepts/managing-fields-externally#behavior_for_list_fields_in_resource_spec) annotation to most Config Connector resources. Feature Added `spec.placement.managedCluster.config.gceClusterConfig.shieldedInstanceConfig` to `DataprocWorkflow`. ## September 01, 2022 Feature Added `spec.lifecycleRule.condition.matchesPrefix` and `spec.lifecycleRule.condition.matchesSuffix` fields to `StorageBucket`. Fixed Fixed the mutability of `spec.settings.collation` in `SQLInstance`, as it is actually immutable. Feature Added `spec.scheduling.instanceTerminationAction` field to `ComputeInstance`. Feature Added `spec.conditions.conditionMonitoringQueryLanguage.evaluationMissingData`, and `spec.conditions.conditionThreshold.evaluationMissingData` fields to `MonitoringAlertPolicy`. Feature Added `spec.settings.locationPreference.secondaryZone`, `spec.settings.passwordValidationPolicy`, and `spec.settings.sqlServerAuditConfig` fields to `SQLInstance`. Feature Added `spec.customerManagedKeyRef` field to `RedisInstance`. Feature Added `spec.binaryAuthorization.evaluationMode` field in `ContainerCluster`. Feature Added `spec.networkRef` and `spec.subnetworkRef` fields to `ComputeRegionNetworkEndpointGroup`. Feature Added `spec.versionRetentionPeriod` field to `SpannerDatabase`. Announcement Config Connector version 1.93.0 is now available. Feature Added `spec.scheduling.instanceTerminationAction` field to `ComputeInstanceTemplate`. Deprecated Config Connector will deprecate `GameServicesRealm` on November 15, 2022 due to the deprecation of Google Cloud Game Servers on June 30, 2023. This means that Config Connector will stop reconciling `GameServicesRealm` resources. If you have any questions or require assistance, please contact [Google Cloud Support](https://docs.cloud.google.com/support-hub). Deprecated Deprecated `spec.enableBianryAuthorization` field in `ContainerCluster`. Feature Added `spec.binaryAuthorization`, `spec.clusterAutoscaling.autoProvisioningDefaults.bootDiskKMSKeyRef`, and `spec.meshCertificates` fields to `ContainerCluster`. Feature Added `spec.bigqueryConfig` field to `PubSubSubscription`. Feature Added `spec.certificateMapRef` field to `ComputeTargetHTTPSProxy`. Feature Added `spec.cdnPolicy.bypassCacheOnRequestHeaders` and `spec.cdnPolicy.requestCoalescing` fields to `ComputeBackendBucket`. Change Increased webhook timeout to 10s. Feature Added support for "reconcile resource immediately once its dependency is ready" feature for `CloudFunctionsFunction`, `EventarcTrigger`, `MonitoringUptimeCheckConfig`, `ServiceDirectoryEndpoint`, and `ServiceDirectoryService`. ## August 17, 2022 Change Config Connector version 1.92.0 is now available. Fixed Fixed missing `Kind` field in Go Client `ResourceRef` struct. Feature Added support for "reconcile resource immediately once its dependency is ready" feature for `CloudFunctionsFunction`, `EventarcTrigger`, `MonitoringUptimeCheckConfig`, `ServiceDirectoryEndpoint`, `ServiceDirectoryService` Feature Added support for `IAMWorkforcePoolProvider` resource. ## August 04, 2022 Fixed Fixed all reference docs so that code samples now work when they're copy/pasted. Fixed Fixed issue where if `ContainerCluster` had the `remove-default-node-pool` directive set to `true` and there was a `ContainerNodePool` associated with it, after deleting the successfully reconciled `ContainerNodePool`, `ContainerCluster` would get stuck on the `UpdateFailed` state. Feature Added `spec.configmanagement.policyController.monitoring` and `spec.configmanagement.policyController.mutationEnabled` fields to `GKEHubFeatureMembership`. Feature Added support for the `IAMWorkforcePool` resource. Announcement Config Connector version 1.91.0 is now available. Fixed Fixed issue where `SQLInstance` could not reference `KMSCryptoKey`. Feature Added support for `state-into-spec` to `StorageBucket`. ## July 27, 2022 Feature Added `status.pscConnectionId` and `status.pscConnectionStatus` fields to `ComputeForwardingRule`. Feature Added support for `state-into-spec: absent` to `MonitoringAlertPolicy`. Feature Added `spec.includeBuildLogs` field to `CloudBuildTrigger`. Feature Added support for "reconcile resource immediately once its dependency is ready" feature for `ComputeTargetPool`, `ComputeNetworkEndpointGroup`, `NetworkServicesGRPCRoute`, `NetworkServicesTLSRoute`. Feature Added `spec.maxPortsPerVm` field to `ComputeRouterNats`. Announcement Config Connector version 1.90.0 is now available. Feature Added `spec.monitoringConfig.managedPrometheus` field to `ContainerCluster`. Feature Added `spec.sslPolicyRef` field to `ComputeTargetHTTPSProxy`. Feature Added `spec.enableUlaInternalIpv6` and `spec.internalIpv6Range` fields to `ComputeNetwork`. Fixed Fixed issue where `spec.layer7DdosDefenseConfig` field in `ComputeSecurityPolicy` was not being reflected onto underlying resource. Feature Added `spec.advancedOptionsConfig` field to `ComputeSecurityPolicy`. Feature Added `spec.externalDataConfiguration.connectionId` field to `BigQueryTable`. Feature Added `status.creationTime` and `status.managedZoneId` fields to `DNSManagedZones`. Feature Added `spec.schemaSettings` field to `PubSubTopic`. Feature Added `spec.egressPolicies.egressTo.externalResources` field to `AccessContextManagerServicePerimeters`, Feature Added `spec.sqlServerUserDetails` field to `SQLUser`. Feature Added `spec.iap.oauth2ClientIdRef` field to `ComputeBackendService`. Feature Added support for `ServiceDirectoryEndpoint` resource. Feature Added `spec.cacheKeyPolicy.cdnPolicy.includeNamedCookies` field to `ComputeBackendService`. Feature Added support for the `DLPStoredInfoType` resource. ## June 21, 2022 Feature Added `spec.cdnPolicy.cacheKeyPolicy` field to `ComputeBackendBucket`. Feature Added support for `PubSubSchema` resource. Announcement Config Connector version 1.89.0 is now available. Fixed Fixed bulk-export for `MonitoringAlertPolicy`. ## June 09, 2022 Announcement Config Connector version 1.88.0 is now available. Feature Added support for `ServiceDirectoryNamespace` and `ServiceDirectoryService` resources. Feature Added fields `spec.maintenancePolicy` and `spec.maintenanceSchedule` to `MemcacheInstance` resource. ## June 01, 2022 Announcement Config Connector version 1.87.0 is now available. Feature Added `spec.enableDynamicPortAllocation` field to `ComputeRouterNAT`. Feature Added `spec.gateways` field to `NetworkServicesTCPRoute`. Feature Added `spec.settings.activeDirectoryConfig` field to `SQLInstance`. Feature Added `spec.maintenancePolicy.maintenanceExclusion[].exclusionOptions` field to `ContainerCluster`. Feature Added `spec.pscTargetService` field to `ComputeRegionNetworkEndpointGroup`. ## May 24, 2022 Fixed Fixed issue where webhooks were unintentionally returning 500 errors when rejecting immutable field changes. Feature Added support for `ComputeRegionNetworkEndpointGroup` resource. Feature Added `spec.serviceDirectoryRegistrations` field to `ComputeForwardingRule`. Announcement Config Connector version 1.86.0 is now available. ## May 19, 2022 Feature Added support for `PrivateCACertificate` resource. Feature Added `spec.secondaryIpRange` field to `RedisInstance`. Change Changed `spec.readReplicasMode` in `RedisInstance` from immutable to optional. Announcement Config Connector version 1.85.0 is now available. Change Fixed `spec.topics` in `SecretManagerSecret` (Issue [#655](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/655)). Feature Added `spec.subsetting` field to `ComputeBackendService`. Change Fixed the reference configs for `AccessContextManagerServicePerimeter`. ## May 10, 2022 Feature Added `spec.enableExactlyOnceDelivery` field to `PubSubSubscription`. Announcement Config Connector version 1.84.0 is now available. Breaking Removed `spec.gateways` field from `NetworkServicesTCPRoute` (Alpha). Feature Added `spec.rule.redirectOptions` field to `ComputeSecurityPolicy`. Breaking Removed `status.terminalCondition.domainMappingReason` and `status.terminalCondition.internalReason` fields from `RunService` (Alpha). Feature Added `spec.columnLayout.columns.widgets.logsPanel`, `spec.gridLayout.widgets.logsPanel`, `spec.mosaicLayout.tiles.widget.logsPanel`, and `spec.rowLayout.rows.widgets.logsPanel` fields to `MonitoringMonitorDashboard`. Feature Added `spec.approvalConfig` field to `CloudBuildTrigger`. Deprecated Deprecated `spec.rrdatas` field in `DNSRecordSet`. Feature Added `spec.rrdatasRefs` field to `DNSRecordSet`. Feature Added `cnrm.cloud.google.com/skip-wait-on-job-termination` directive to `DataflowFlexTemplateJob` and `DataflowJob`. Change Reduced reconciliation frequency of `ConfigConnector` object. Feature Added `spec.addonsConfig.gkeBackupAgentConfig` field to `ContainerCluster`. Breaking Removed `spec.template.confidential` field from `RunService` (Alpha). Breaking Renamed `spec.template.volumes.cloudSqlInstance.connections` to `spec.template.volumes.cloudSqlInstance.instances` in `RunService` (Alpha). Feature Added `IAMPolicy` and `IAMPolicyMember` support for `AccessContextManagerAccessPolicy`. ## April 25, 2022 Feature Added `IAMPolicyMember` support for `BinaryAuthorizationPolicy`, `CloudFunctionsFunction`, `DataprocCluster`, `NetworkSecurityAuthorizationPolicy`, `NetworkSecurityClientTLSPolicy`, `NetworkSecurityServerTLSPolicy`, and `RunService`. Announcement Config Connector version 1.83.0 is now available. Change Made the `spec.resourceRef.apiVersion` field in `IAMPolicy`, `IAMPartialPolicy`, `IAMPolicyMember`, `IAMAuditConfig` optional. ## April 21, 2022 Deprecated Deprecated `spec.networkInterface[].networkIp` field in `ComputeInstance` resource. Announcement Config Connector version 1.82.0 is now available. Feature Added field `spec.networkInterface[].networkIpRef` to `ComputeInstance` resource. ## April 13, 2022 Breaking This release contains an issue that may prevent you from successfully deleting namespaces with Config Connector enabled if using Config Connector in namespaced-mode. If you are using namespaced-mode, do not upgrade to version 1.81.0 - please upgrade to 1.82.0 instead. Feature Added field `spec.edgeSecurityPolicy` to `ComputeBackendBucket` resource. Feature Added field `spec.cluster[].autoscalingConfig` to `BigtableInstance` resource. Fixed Fixed the bug introduced in version 1.62.0 that list fields can't be set to empty lists. (Issue [#595](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/595)) Feature Added field `spec.type` to `ComputeSecurityPolicy` resource. Feature Added support for `ApigeeEnvironment` resource. Feature Added field `spec.schedule.repeatInterval` to `StorageTransferJob` resource Announcement Config Connector version 1.81.0 is now available. ## April 07, 2022 Announcement Config Connector version 1.80.0 is now available. Feature Added support for `NetworkServicesTLSRoute` resource. Feature Added `spec.destination.loggingLogBucketRef` to LoggingLogSink. Feature Added support for `ApigeeOrganization` resource. ## March 30, 2022 Feature Added `spec.nodeConfig.gvnic` to ContainerCluster. Feature Added `spec.filter`, `spec.gitFileSource`, and `spec.sourceToBuild` to CloudBuildTrigger. Announcement Config Connector version 1.79.0 is now available. Feature Added IAMPolicy support for `BinaryAuthorizationPolicy`, `CloudFunctionsFunction`, `DataprocCluster`, `NetworkSecurityAuthorizationPolicy`, `NetworkSecurityClientTLSPolicy`, `NetworkSecurityServerTLSPolicy`, and `RunService`. Feature Added `spec.mavenConfig` to ArtifactRegistryRepository. Feature Added `spec.nodeConfig.gvnic` to ContainerNodePool. Feature Added support for `MonitoringMonitoredProject` resource. ## March 21, 2022 Announcement Config Connector version 1.78.0 is now available. Fixed Fixed issue where users could not switch between the field `github.push` and the field `github.pullRequest` in `CloudBuildTrigger` resources ([Issue #357](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/357)). Fixed Fixed issue where users could not switch between the field `singleClusterRouting` and the fields `multiClusterRoutingUseAny` and `multiClusterRoutingClusterIds` in `BigtableAppProfile` resources. Fixed Fixed issue where users could not update the policy in `ResourceManagerPolicy` resources. ## March 16, 2022 Announcement Config Connector version 1.77.0 is now available. Feature Added support for ARM binaries. Feature Added support for `IdentityPlatformConfig` resource. ## March 04, 2022 Feature Added support for `EventarcTrigger` resource. Feature Added fields `spec.maintenancePolicy` and `spec.maintenanceSchedule` into `RedisInstance` resource. Feature Added support for `BillingBudgetsBudget` resource. Feature Added field `spec.rule[].rateLimitOptions` into `ComputeSecurityPolicy` resource. Change `StorageTransferJob`: Fields `spec.schedule` and `spec.transferSpec.awsS3DataSource.awsAccessKey` are no longer required. Feature Added fields `spec.transferSpec.awsS3DataSource.roleArn`, `spec.transferSpec.posixDataSink` and `spec.transferSpec.posixDataSource` into `StorageTransferJob` resource. Feature Added field `status.selfLink` into `NetworkServicesGateway`,`NetworkServicesGRPCRoute`, `NetworkServicesHTTPRoute`, `NetworkServicesMesh` and `NetworkServicesTCPRoute` resources. Announcement Config Connector version 1.75.0 is now available. Feature Added fields `spec.addonsConfig.gcpFilestoreCsiDriverConfig` and `spec.clusterAutoscaling.autoProvisioningDefaults.imageType` into `ContainerCluster` resource. Feature Added support for `LoggingLogView` resource. ## February 18, 2022 Fixed Fixed `topicRef` in `CloudBuildTrigger` (Issue [#605](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/605)). Feature Added support for `PrivateCACertificateAuthority` resource Announcement Config Connector version 1.74.0 is now available. ## February 11, 2022 Change CRD go clients (alpha) have moved to `pkg/clients/generated/client/clientset/versioned/` package. Feature Added support in `IAMPartialPolicy` and `IAMPolicy` to cover `Organization` and `BillingAccount` resources. Announcement Config Connector version 1.73.0 is now available. Feature Added support for `ComputeFirewallPolicyAssociation` resource. Fixed Fixed `spec.target.targetHTTPProxyRef` issue in `ComputeForwardingRule` (Issue [#596](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/596)). ## February 01, 2022 Fixed Miscellaneous bug fixes. Announcement Config Connector version 1.72.1 is now available. ## January 25, 2022 Feature Added support for `CloudFunctionsFunction` resource. Feature Added support for `LoggingLogBucket` resource. Feature Added fields `spec.alertStrategy` and `spec.conditions.conditionMatchedLog` to `MonitoringAlertPolicy` resource. Announcement Config Connector version 1.72.0 is now available. ## January 19, 2022 Feature Added support for `NetworkConnectivitySpoke` resource. Announcement Config Connector version 1.71.0 is now available. Feature Added `spec.build.availableSecrets` to `CloudBuildTrigger` resource. Feature Added support for `LoggingLogMetric` resource. Feature Added `spec.identityServiceConfig` to `ContainerCluster` resource. Feature Added regional support for `ComputeTargetHTTP(S)Proxy` resource(s). Feature Added `spec.settings.ipConfiguration.allocatedIpRange` to `SQLInstance` resource. Feature Added `spec.readReplicaMode`, `spec.replicaCount` and `status.nodes` to `RedisInstance` resources. Feature Added `spec.publicAccessPrevention` to `StorageBucket` resource. Feature Added `spec.nodeConfig.nodeGroupRef` and `spec.nodeConfig.spot` to `ContainerCluster` and `ContainerNodePool` resources. ## January 07, 2022 Change `StorageBucket`: It now errors out if `spec.bucketPolicyOnly` (deprecated) and `spec.uniformBucketLevelAccess` are both present but with different values. We recommend using `spec.uniformBucketLevelAccess` field only. Change `ContainerCluster`: It now errors out if `spec.workloadIdentityConfig.identityNamespace` (deprecated) and `spec.workloadIdentityConfig.workloadPool` are both present but with different values. We recommend using `spec.workloadIdentityConfig.workloadPool` field only. Feature Added support for `RunService` (alpha) resource. Feature Added fields `spec.bfd.minReceiveInterval`, `spec.bfd.minTransmitInterval`, `spec.bfd.multiplier`, and `spec.bfd.sessionInitializationMode` to `ComputeRouterPeer` resource. Change `ComputeSnapshot`: Output-only field `status.sourceDiskLink` is removed. Change `SQLInstance`: `spec.settings.authorizedGaeApplications`, `spec.settings.crashSafeReplication`, `spec.settings.replicationType` become no-ops fields. We recommend removing these fields in your configuration. Change `ContainerCluster`: The default value for `spec.enableShieldedNodes` is changed to `true`. Feature Added support for `MonitoringUptimeCheckConfig` resource. Change `ContainerCluster`: Output-only field `status.instanceGroupUrls` is removed. Change `config-connector` CLI removes the ability to export default `ComputeNetwork`, `ComputeSubnetwork`, and `ComputeRoute` via `bulk-export` command. Those default network assets contain invalid values in other contexts. Removing them from bulk export to avoid additional manual handling of the exported configuration. Feature Added field `spec.nodeConfig.gcfsConfig` (deprecated) to `ContainerCluster` resource. `spec.nodeConfig` is a deprecated field that we recommend not using in your configuration. Announcement Config Connector 1.70.0 is now available Feature Supported referencing Workload Identity principals in `IAMPolicyMember`. (Issue [#583](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/583)) Feature Added support for `NetworkServicesGateway` (alpha), `NetworkServicesMesh` (alpha), `NetworkServicesGRPCRoute` (alpha), `NetworkServicesHTTPRoute` (alpha), and `NetworkServicesTCPRoute` (alpha) resources. Change `ComputeInstance` and `ComputeInstanceTemplate`: Configuring field `spec.serviceAccount.scopes` with value `trace-append` or `trace-ro` is no longer available. Use `trace` instead. Feature Added field `spec.networkInterface.queueCount` to `ComputeInstance` and `ComputeInstanceTemplate` resources. Feature Added field `spec.messageRetentionDuration` to `PubSubTopic` resource. Feature Added fields `spec.nodeConfig.gcfsConfig` and `spec.managedInstanceGroupUrls` to `ContainerNodePool` resource. Change `PubSubSubscription`: Output-only field `status.path` is removed. ## December 14, 2021 Feature Added support for `CloudIdentityMembership` resource Feature Added support for `IAMWorkloadIdentityPool` resource Feature Add `billgProject` flag in `ConfigConnectorContext` to specify a quota project to send along with `user_project_override` header, used for all requests sent from Config Connector. If set on a resource that supports sending the resource project, this value will supersede the resource project. This field can only be set if `requestProjectPolicy` takes `BILLING_PROJECT` value Feature Added support for `IAMWorkloadIdentityPoolProvider` resource Feature Added support for `VPCAccessConnector` resource Feature Rollout support for `state-into-spec: absent` to `ContainerCluster` resource (Issue [#576](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/576)) Announcement Config Connector 1.69.0 is now available Feature Added support for `PrivateCACAPool` resource Fixed Fixed the issues in `ContainerCluster` with creating autopilot clusters Fixed Fixed the issues in `config-connector export` that the exported YAML now include zero primitives to match the Google Cloud resource live state Feature Added support for `ComputePacketMirroring` resource ## December 01, 2021 Announcement Config Connector 1.68.0 is now available. Feature Added support for `MonitoringServiceLevelObjective` resource. Feature Added support for `RecaptchaEnterpriseKey` resource. Feature Added support for `OSConfigOSPolicyAssignment` resource. Feature Added support for `MonitoringService` resource. Feature Added support for `resourceID` field for `SecretManagerSecretVersion` resource. Feature Added support for regional `ComputeSSLCertificate` resource. Feature Added support for `NetworkConnectivityHub` resource. ## November 11, 2021 Announcement Config Connector 1.67.0 is now available. Fixed Fixed the issues in `config-connector bulk-export` and the exported `IAMCustomRole` resources can now be imported into Config Connector. Feature Added support for `ConfigControllerInstance` (Alpha) resource. Feature Added support for `PrivateCACertificateTemplate` resource. Feature Added fields `spec.nodeConfig.guestAccelerator[].gpuPartitionSize` and `spec.workloadIdentityConfig.workloadPool` to `ContainerCluster` resource. Feature Added field `spec.nodeConfig.guestAccelerator[].gpuPartitionSize` to `ContainerNodePool` resource. Fixed Fixed the issue that `DataflowJob` was repeatedly updating if `spec.enableStreamingEngine` was set to `true`. Deprecated Deprecated `spec.workloadIdentityConfig.identityNamespace` (field is also no longer required), `spec.masterAuth` and `status.instanceGroupUrls` in `ContainerCluster` resource. ## November 04, 2021 Announcement Config Connector 1.66.0 is now available. Feature Added support for `memberFrom` in `IAMPartialPolicy`. Fixed Miscellaneous bug fixes and improvements. ## November 01, 2021 Feature Added support for the `ComputeServiceAttachment` resource. Change Config Connector 1.65.0 is now available. Feature `config-connector command` cli print-resources now includes a column listing whether it supports of related IAM resources. Fixed `config-connector` command cli now correctly labels supported bulk-export resources. Change All config-connector containers now emit logging to stdout rather than stderr. ## October 25, 2021 Feature Added `ipv6AccessType`, `stackType`, `externalIpv6Prefix`, `ipv6CidrRange` fields to `ComputeSubnetwork`. Feature Added `ipv6AccessConfig`, `ipv6AccessType` and `stackType` fields to `ComputeInstance`. Feature Added `connectionTrackingPolicy` field to `ComputeBackendService`. Feature Added `nodeConfig.workloadMetadataConfig.mode`; deprecated `nodeConfig.workloadMetadataConfig.nodeMetadata` in `ContainerCluster`. Feature Added `gcsDataSink.path` and `gcsDataSource.path` fields to `StorageTransferJob`. Change In DNSRecordSet, `ttl` field is no longer required. Change Handle the lifecycle of `ConfigConnectorContext` objects in a separate controller for better isolation and scalability. Feature Added `importOnly` field to `KMSCryptoKey`. Feature Added support for `ComputeFirewallPolicyRule` resource. Feature Added `monitoringConfig`, `dnsConfig` and `loggingConfig` fields to `ContainerCluster`. Feature Added `serviceAccountRef` field to `CloudBuildTrigger`. Change Moved `version` field to status in `DataprocWorkflowTemplate`. Feature Added `disabled` field to `IAMServiceAccount`. Feature Added `ipv6AccessConfig`, `ipv6AccessType` and `stackType` fields to `ComputeInstanceTemplate`. Announcement Config Connector 1.64.0 is now available. Feature Added support for `FilestoreBackup` and `FilestoreInstance` resources. Fixed Fixed the issue of changing BigTableInstance node size. ## October 01, 2021 Feature Added `spec.destroyScheduledDuration` to `KMSCryptoKey`. Change `ComputeRouterPeer`: `ipAddress` is no longer a read-only field, and can be set with the `spec.ipAddress` field. Deprecated `ComputeDisk`: `spec.interface` has been deprecated. The value of `spec.interface` is no longer used by the API, so all validation has been removed and values will not be populated. You should remove this field from your configuration. Feature Added `spec.configSync.git.gcpServiceAccountRef` to `GKEHubFeatureMembership`. Announcement Config Connector 1.63.0 is now available. ## September 21, 2021 Announcement Config Connector 1.62.0 is now available. Fixed Miscelleanous bug fixes. Feature Added `Age` and `Healthy` columns for the `kubectl get` tabular outputs of `ConfigConnector` and `ConfigConnectorContext` resources. ## September 10, 2021 Feature Added the `securitySettings` field to `ComputeBackendService` Fixed Fixed a bug in `BigqueryJob` that generates unexpected diff for 'kms_key_name' Announcement Config Connector 1.61.0 is now available Change Added jitter to resource reconciliation reenqueue period to smooth out the traffic pattern ## September 03, 2021 Feature Added support for `ComputeFirewallPolicy` resource. Announcement Config Connector 1.60.0 is now available. Fixed Fixed the error when deleting the `ConfigConnectorContext` object. (Issue [#523](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/523)) ## August 19, 2021 Fixed Fixed the issue where ComputeInstance fails reconciliation if metadata is set outside KCC (Issue [#524](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/524)) Announcement Config Connector 1.59.0 is now available Feature Added `processingUnits` field into `SpannerInstance` Feature config-connector CLI supports `IAMPartialPolicy` as an IAM output format Feature Added `networkConfig` field into `ContainerNodePool` ## August 12, 2021 Fixed Miscellaneous bug fixes. Announcement Config Connector 1.58.1 is now available. ## August 02, 2021 Change Config Connector 1.58.0 is now available. Feature Added a list of resources which have [service-generated resource IDs](https://docs.cloud.google.com/config-connector/docs/how-to/managing-deleting-resources#service-generated-resource-id). Feature Added support for `MonitoringMetricDescriptor` resource. Feature `CloudBuildTrigger`: added `webhookConfig` and `pubsubConfig` options for triggers. Feature Added limited support for the `cnrm.cloud.google.com/state-into-spec` annotation, which allows `merge` and `absent` values to merge a resource's state into the spec field or not, respectively. Currently only supported for `BigQueryDataset`. ## July 22, 2021 Announcement Config Connector 1.57.0 is now available. Feature Added `advancedMachineFeatures` to `ComputeInstance`. Feature Added support for `GKEHubFeatureMembership` resource. Fixed Reverted `DNSRecordSet`to an older implementation (from v1.50.0) due to an issue that broke users' ability to modify `rrdatas`. Note that this also means that `rrdatas` and `ttl` are required fields again. Feature Added `spec.projectRef` to `ServiceUsageService`. Feature Added the following output-only fields: - `BigQueryJob`: `query.destinationEncryptionConfiguration.kmsKeyVersion`, `load.destinationEncryptionConfiguration.kmsKeyVersion`, and `copy.destinationEncryptionConfiguration.kmsKeyVersion`. - `BigQueryTable`: `encryptionConfiguration.kmsKeyVersion`. ## July 13, 2021 Fixed Fixed bug that was causing `CloudIdentityGroup` to go through infinite updates. Announcement Config Connector 1.56.0 is now available. Feature Added `expire`, `rotation`, `topics`, and `ttl` fields to `SecretManagerSecret` ([Issue #471](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/471)). Feature Added `cluster.kmsKeyRef` field to `BigtableInstance`. Feature Aggregated the `cnrm-admin` ClusterRole to the `admin` and `edit` ClusterRoles, and aggregated the `cnrm-viewer` ClusterRole to `view` ClusterRole. See [Aggregated ClusterRoles](https://kubernetes.io/docs/reference/access-authn-authz/rbac/#aggregated-clusterroles) for details ([Issue #486](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/486)). Feature Added support for `ComputeInstanceGroupManager` resource ([Issue #314](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/314)). Feature Added support for `BinaryAuthorizationPolicy` resource. Feature Added timestamp to log messages. ## July 07, 2021 Change Reduced max retry interval on failure to 120 seconds for fast reconciliation Change Added new fields: - `ComputeInstance`: `networkPerformanceConfig.totalEgressBandwidthTier` field added. - `ComputeInstanceTemplate`: `advancedMachineFeatures` field added. - `ComputeInstanceTemplate`: `confidentialInstanceConfig.enableConfidentialCompute` field is now immutable. - `ComputeInstanceTemplate`: `networkPerformanceConfig.totalEgressBandwidthTier` field added. - `ComputeSecurityPolicy`: `adaptiveProtectionConfig` field added. - `RedisInstance`: `redisVersion` field no longer immutable. Fixed Use IAMResourceRef type in IAMPartialPolicySpec (Issue [#495](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/495)) Announcement Config Connector 1.55.0 is now available Fixed ContainerCluster supports User Project Override (Issue [#492](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/492)) Feature Added NetworkServicesEndpointPolicy support ## June 24, 2021 Change `ComputeVPNGateway`: `vpnInterfaces` field moved from `status` to `spec` and now includes `interconnectAttachmentRef` field. Change Added support for ingress and egress policies in `AccessContextManagerServicePerimeter` Announcement Config Connector 1.54.0 is now available Change Added new fields: - `ComputeAddress`: `networkRef` - `ComputeDisk`: `provisionedIops` - `ComputeInstance`: `reservationAffinity` - `ComputeInstanceTemplate`: `reservationAffinity` - `ComputeInterconnectedAttachment`: `encryption` and `ipsecInternalAddresses` - `ComputeResourcePolicy`: `description` and `instanceSchedulePolicy` - `ComputeRouterInterface`: `encryptedInterconnectRouter` - `SQLInstance`: `diskAutoresizeLimit` - `StorageTransferJob`: `transferSpec.azureBlobStorageDataSource` Change `ComputeAddress`: `purpose` field now additionally accepts IPSEC_INTERCONNECT. Change `SQLInstance`: `databaseVersion` field now additionally accepts POSTGRES_10, POSTGRES_12, and POSTGRES_13. Change The following fields are no longer immutable: - `CloudIdentityGroup`: `initialGroupConfig` - `DataflowFlexTemplateJob`: `containerSpecGcsPath` and `parameters` Feature Added support for the following resources: - `MonitoringDashboard` - `GKEHubFeature` - `IAMPartialPolicy` - `NetworkSecurityAuthorizationPolicy` - `BinaryAuthorizationAttestor` ## June 21, 2021 Announcement Config Connector 1.53.0 is now available Change Change `cnrm-system` containers to use HTTP probes for readiness instead of command probes Feature Added support for `NetworkSecurityServerTLSPolicy` Feature Added support for strong hierarchal references to several resources: - Add `spec.projectRef` to `DataprocAutoScalingPolicy` - Add `spec.projectRef` to `DataprocCluster` - Add `spec.projectRef` to `DataprocWorkflowTemplate` - Add `spec.projectRef` to `MonitoringGroup` Feature Added support for `NetworkSecurityClientTLSPolicy` ## June 11, 2021 Announcement Config Connector 1.52.0 is now available. Feature `IAMServiceAccount`: added support for resourceID. Feature Added support for `ComputeURLMap`, `DataFusionInstance`, `LoggingLogExclusion`. Fixed `spec.preservedUnknownFields` is set to false for all CRDs, ensuring consistent behavior as the flag is set from true to false across Kubernetes versions. ## June 02, 2021 Fixed Miscellaneous bug fixes. Announcement Config Connector 1.51.2 is now available. ## May 27, 2021 Change Config Connector 1.51.1 is now available Fixed Miscellaneous bug fixes. ## May 24, 2021 Change Added field `spec.initialGroupConfig` to `CloudIdentityGroup` Change Added field `spec.initialSize` to `ComputeNodeGroup` Change Added field `spec.externalDataConfiguration.hivePartitioningOptions.requirePartitionFilter` to `BigQueryTable` Change Added field `spec.replication.userManaged.replicas[].customerManagedEncryption` to `SecretManagerSecret` Change Added field `spec.basic.conditions[].devicePolicy.osConstraints[].requireVerifiedChromeOs` to `AccessContextManagerAccessLevel` Change Added field `spec.encryptionConfig` to `SpannerDatabase` Change Added field `spec.maintenanceWindow` to `ComputeNodeGroup` Announcement Config Connector 1.51.0 is now available ## May 17, 2021 Announcement Config Connector version 1.50.0 is now available. Fixed Fixed the issue that Storage resources couldn't be deleted if the referenced StorageBucket was deleted first. (Issue [#463](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/463)) Change Resource CRDs are now using `apiextensions.k8s.io/v1`. The minimum required Kubernetes version for using Config Connector v1.50.0 and above is Kubernetes 1.16. This change is in preparation for [the removal of `apiextensions.k8s.io/v1beta1` in Kubernetes 1.22](https://kubernetes.io/docs/reference/using-api/deprecation-guide/#customresourcedefinition-v122). Fixed Fixed the issue that Project creation failed if `spec.resourceID` was set. (Issue [#462](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/462)) Fixed Fixed the IAM resource references in go-client. (Issue [#413](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/413)) ## May 04, 2021 Fixed Miscellaneous bug fixes. Announcement Config Connector version 1.49.1 is now available. ## April 30, 2021 Change Hierarchical reference field is optional for `BigQueryDataset`, `ComputeDisk`, `Folder`, and `Project` (Fixes a follow-up issue in [#349](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/349#issuecomment-827293866)). Announcement Config Connector version 1.49.0 is now available. ## April 27, 2021 Feature Added go-clients for `GKEHubMembership` and `CloudIdentityGroup` Feature `ComputeDisk` added support for `projectRef` Announcement Config Connector version 1.48.0 is now available. ## April 23, 2021 Change Added support `CloudIdentityGroup` and `GKEHubMembership` Announcement Config Connector version 1.47.0 is now available. Fixed Fixed the issue of acquiring ComputeBackendService with iap configuration ([GitHub #304](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/304)) Change Added resourceID support for `Project` resource ## April 16, 2021 Announcement Config Connector version 1.46.0 is now available. Feature `ContainerCluster` supports `enableAutopilot`, `enableL4IlbSubsetting`, and `privateIpv6GoogleAccess`. Fixed `ContainerNodePool` supports disabling autoscaling by setting min and max node counts to 0 (fixes [GitHub issue #437](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/437)) Fixed Go Client now uses a pointer type or allows for a built-in nil value for spec fields that are optional. (fixes [GitHub issue #426](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/426)) Change `SecretManagerSecretVersion` now requires the `secretData` field. Feature `BigQueryDataset` add support for `projectRef` Fixed `cnrm-resource-stats-recorder` container now binds to hostPort 48797 rather than 8888 (fixes [GitHub issue #449](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/449)) Feature Added `observedGeneration` field to `status` for resources, enabling compatibility with kstatus (fixes GitHub issue [#410](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/410)\]{:.external}) ## April 08, 2021 Feature Added `proxyBind` field to `ComputeTargetHTTPProxy`, `ComputeTargeHTTPSProxy`, and `ComputeTargetTCPProxy`. Feature Updated the structs' name of any field `FooBar` to be `KindFooBar` in Go Client resources. This ensures that the struct names are unique within a Go package. Feature Added support for `OSConfigGuestPolicy`, `IdentityPlatformTenant`, `IdentityPlatformOAuthIDPConfig` and `IdentityPlatformTenantOauthIDPConfig`. Announcement Config Connector version 1.45.0 is now available. Feature Supported a viewer cluster role so that resources can be referenced cross namespaces in namespaced mode. (Issue [#407](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/407)) Fixed Fixed issue where `folderRef`/`organizationRef` could not be defaulted from `folder-id`/`organization-id` annotations when creating `Project`/`Folder` resources with server-side apply. (More details can be found [here](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/349#issuecomment-812265155)). Fixed Fixed the ListMeta type in Go Client (Issue [#422](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/422)). Feature Added `enableStreamingEngine` field to `DataflowJob`. ## March 25, 2021 Deprecated Deprecated `nicType` field in `ComputeInstanceTemplate`. Feature Added `settings.backupConfiguration.backupRetentionSettings` and `settings.backupConfiguration.transactionLogRetentionDays` fields to `SQLInstance`. Feature Added `nodeConfig.ephemeralStorageConfig` field to `ContainerCluster` and `ContainerNodePool`. Announcement Config Connector version 1.44.0 is now available. Fixed Fixed incorrect file extension for Terraform files output by the config-connector CLI. Change Made `materializedView.query` field in `BigQueryTable` immutable. Feature Added support for the `ContainerAnalysisNote` resource (no config-connector CLI support) Feature Added `mtu` field to `ComputeInterconnectAttachment`. Feature Added support for acquisitions of `Folder` using `displayName` and `folderRef`/`organizationRef`. ## March 23, 2021 Feature `config-connector` CLI now supports a flag to filter out deleted `IAM` members Feature Added support for `IAPBrand` (no config-connector CLI support) Fixed [Conflict Prevention](https://docs.cloud.google.com/config-connector/docs/concepts/managing-conflicts) is now turned off by default. The current implementation results in the `Ready` condition destabilizing despite the resource reflecting user-desired state. Work is enqueued to improve this behavior, but the functionality is turned off for new resources in the interim. Fixed Webhook certificates that do not contain a SAN are now re-created on upgrade of the Config Connector operator. Feature Added support for `folderRef` and `organizationRef` in `Project` and `Folder`. Announcement Config Connector version 1.43.0 is now available Feature Added support for `IAPIdentityAwareProxyClient` (no config-connector CLI support) ## March 12, 2021 Fixed Ensure that CLI will not terminate on particular problematic resources when on-error is set with `ignore` or `continue` Change Added `operation` field into `ContainerNodePool` Change Increase resource limits of webhook, recorder and deletiondefender workloads On upgrade, ensure that your cluster has sufficient CPU/Memory to allocate if you have seen Pod Unschedulable errors Announcement Config Connector version 1.42.0 is now available. Fixed Miscellaneous bug fixes ## March 05, 2021 Announcement Config Connector version 1.41.0 is now available. Fixed Updated the format of the version tag to v0.0.0 so that Config Connector v1.41.0 and above can be fetched as a Go module. (Issue [#408](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/408)) Feature Added `targetGRPCProxyRef` field in `ComputeForwardingRule`. Feature Added `insightsConfig` field in `SQLInstance`. Feature Added `transitEncryptionMode` field in `RedisInstance`. Also added `serverCaCerts` to the status of `RedisInstance`. ## February 26, 2021 Announcement Config Connector version 1.40.0 is now available Feature New fields for `ComputeInstanceTemplate`: `nicType` and `resourcePolicies` Feature Added support for `DataprocWorkflowTemplate` (no config-connector CLI support, expected Q2) Feature New status field for `BigQueryJob`: `status` Feature Added support for `DataprocAutoscalingPolicy` (no config-connector CLI support, expected Q2) Feature New field for `ComputeInstance`: `nicType` Feature Added support for `MemcacheInstance` Feature Added support for `DataprocCluster` (no config-connector CLI support, expected Q2) Fixed Go client is no longer nested under `generated` folder. ## February 22, 2021 Announcement Config Connector version 1.39.0 is now available Feature Added support for `CloudSchedulerJob` resource Feature Alpha release of Go types and clients for Config Connector resources Fixed Fixed issue with `ArtifactRegistryRepository` always failing to update Fixed Reverted webhook port to `443` to alleviate forwarding rule issue on GKE private clusters Fixed Fixed issue with aggressive retrying of failed updates leading to exhausting quota ## February 09, 2021 Fixed Miscellaneous bug fixes Announcement Config Connector version 1.38.1 is now available ## February 05, 2021 Feature Added resourceID support to: `ContainerCluster`, `ContainerNodePool`, `SourceRepoRepository` and `AccessContextManager` resources Fixed `config-connector bulk-export` now operates on `LoggingLogSink` resources Change Config Connector version 1.38.0 is now available Change Increased CPU and Memory limit for ConfigConnector Operator ## January 27, 2021 Announcement Config Connector version 1.37.0 is now available. Feature Added `resourceID` support for `ArtifactRegistryRepository`, `Bigtable` resources, `DataflowJob`, `DNS` resources, `Monitoring` resources, `RedisInstance`, `ResourceManagerLien`, `SecretManagerSecret`, `Spanner` resources, `StorageTransferJob`. Change Added a column `Status Age` showing the last transition time for the value in `Status`, and added the column `Age` back to the default output of kubectl get for all Config Connector resources. Improved the value at `Status` and `Ready` columns to match against the condition name. Fixed Fixed the issue with the legacy Common Name field on x509 certificate. Config Connector should be working on clusters of K8s 1.19+. (Issue [#335](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/335)) ## January 22, 2021 Change Added a column 'Ready' showing the value of the .status.conditions\[0\] (the ready condition), and associated Status to the default output of kubectl get for all Config Connector resources. Feature Added a new sub-command to the CLI, config-connector print-resources which shows all config connector resources and their associated level of export and bulk-export support. Change Reduce the memory usage of deletiondefender and controller-manager in high-scale scenarios (1000+ resources under management). Feature Added resourceID support to the Compute resources. Feature Added support for referencing an organization to IAMCustomRole. Announcement Config Connector version 1.36.0 is now available ## January 13, 2021 Feature Added `resourceID` support for: `SQL` resources, Pub/Sub resources, `LoggingLogSink`, `StorageBucket`, `KMS` resources, `IAMCustomRole`. Announcement Config Connector version 1.35.0 is now available. Feature Added support for the `MonitoringGroup` resource. ## January 06, 2021 Change Allow for `IAMPolicy`, `IAMPolicyMember`, and `IAMAuditConfig` to reference resources in other namespaces. Feature Added support for `UpdateFailed`, `DeleteFailed`, `DependencyNotFound`, and `DependencyNotReady` events to `IAMPolicy`, `IAMPoicyMember`, `IAMAuditConfig`. Announcement Config Connector version 1.34.0 is now available. Feature Added support for IAM Member References. This allows users to create an `IAMPolicyMember` that references another resource as the IAM member (e.g. `IAMServiceAccount`, `LoggingLogSink`). For more information, see the `memberFrom` field in the [IAMPolicyMember reference documentation](https://docs.cloud.google.com/config-connector/docs/reference/resource-docs/iam/iampolicymember). Support for IAM Member References is added only to `IAMPolicyMember`, not `IAMPolicy`. Feature Added `cacheMode`, `clientTtl`, `defaultTtl`, `maxTtl`, `negativeCaching`, `negativeCachingPolicy`, `serveWhileStale`, and `customResponseHeaders` fields to `ComputeBackendBucket`. Feature Added support for the `GameServicesRealm` resource. Feature Added IAM support for `ComputeDisk`. Change Allow for `Project` and `Folder` resources to be migrated across folders and organizations by updating the `folder-id`/`organization-id` annotation. Only folder-to-folder or organization-to-organization migrations are allowed; folder-to-organization migrations or vice versa are not yet supported. Feature Added `customTimeBefore`, `daysSinceCustomTime`, `daysSinceNoncurrentTime`, and `noncurrentTimeBefore` fields to `StorageBucket`. ## December 09, 2020 Feature Added support for the `ComputeProjectMetadata` resource Feature Added `resourceID` field to `ServiceUsageService` and `StorageNotification` Feature Added `computeResponseHeaders` field to `ComputeBackendService` Feature Added IAM support to `BigtableTable` Feature Added `description` and `disabled` fields to `LoggingLogSink` Feature `DataflowJobs` can now be acquired via name Announcement Config Connector version 1.33.0 is now available. Feature Added `maintenancePolicy.maintenanceExclusion` field to `ContainerCluster` ## December 01, 2020 Fixed Fixed the bug that the Bigtable Garbage Collection Policy can't be created via the Config Connector `BigQueryGCPolicy` resource. (Issue [#300](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/300)) Change Added "ORC" as a new available value to the CRD description of `externalDataConfiguration.sourceFormat` field in `BigQueryTable`. Announcement Config Connector version 1.32.0 is now available. Feature Added the `customResponseHeaders` field to `ComputeBackendService`. Feature Added the `resourceID` field to `Folder`, `BigQueryTable`, `BigQueryJob`, and `BigQueryDataset`. (Issue [#147](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/147) and [#128](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/128)) Feature Added the `maintenancePolicy.maintenanceExclusion` field to `ContainerCluster`. Feature Added the `description` and `disabled` fields to `LoggingLogSink`. ## November 29, 2020 Change Miscellaneous fixes and improvements Announcement Config Connector version 1.31.1 is now available ## November 23, 2020 Fixed Fixed issue where `IAMPolicyMember` and `IAMPolicy` resources cannot be deleted if an invalid configuration is applied (such as referencing a non-existent resource) Announcement Config Connector version 1.31.0 is now available Fixed Fixed issue where `notificationConfig.pubsub.topicRef` was not usable Feature Added support for the `ResourceManagerLien` resource Feature Added support for the `ComputeTargetGRPCProxy` resource ## November 10, 2020 Announcement Config Connector version 1.30.0 is now available. Feature Added `maintenancePolicy` field to `ComputeNodeGroup`. Feature Added support for the `MonitoringAlertPolicy` resource. Change Added more field descriptions. Feature Added `mtu` field to `ComputeNetwork`. Fixed Fixed bug where `DataflowJob` would fail to create if `zone` is unspecified even if `region` is specified. Feature Added `privateIpv6GoogleAccess` field to `ComputeSubnetwork`. Change Added "Immutable." to CRD descriptions for immutable fields in `IAMPolicy`, `IAMPolicyMember`, `IAMAuditConfig`. Feature Added `confidentialNodes` field to `ContainerCluster`. Fixed Fixed bug in operator where `ConfigConnector` was not being re-enqueued for reconciliation when there is an error during reconciliation. Feature Added `skipInitialVersionCreation` field to `KMSCryptoKey`. Feature Added `interface` field to `ComputeDisk`. Feature Added `authEnabled` field to `RedisInstance`. Feature Added `exclusions` field to `LoggingLogSink`. ## November 06, 2020 Announcement Config Connector version 1.29.0 is now available. Feature Field descriptions now document immutability. Feature `DataflowJob` labels are now mutable. ## October 28, 2020 Announcement ConfigConnector version 1.28.0 released Feature Add `spec.requestProjectPolicy` field to ConfigConnectorContext CRD ## October 21, 2020 Feature Added support for externally referencing billing account and organizations in `IAMPolicyMember` Feature Added `LoggingLogSink` resource for creating log sinks at project, folder, and organization scopes Feature Added `ResourceManagerPolicy` resource for setting organization policy at project, folder, and organization scopes ## October 19, 2020 Fixed Fixes "413 Request Entity Too Large" seen across multiple resource types Feature Adds support for `MonitoringNotificationChannel` ## October 15, 2020 Feature Add support for the `AccessContextManagerServicePerimeter` resource Feature Support [`export` sub-command](https://docs.cloud.google.com/config-connector/docs/how-to/import-export/export) in the `config-connector` CLI Feature Add support for Folder-level IAM Audit Configs Fixed Fix `deadLetterTopicRef` in the `PubSubSubscription` resource ([Issue #281](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/281)) ## October 07, 2020 Feature Add the `artifacts` and `options` fields to `CloudBuildTrigger` Feature Add logic to auto-trigger server-side apply metadata on resources on K8s clusters with server-side apply enabled (i.e. K8s 1.16+) Feature Add the `auditConfigs` field to `IAMPolicy` Fixed Fix issue where `kubectl get gcp` did not include `IAMPolicy`, `IAMPolicyMember`, and `IAMAuditConfig` resources ([Issue #286](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/286)) Feature Add the `transformNameMapping` field to `DataflowJob` Feature Add support for the `DataflowFlexTemplateJob` resource Feature Add support for the GRPC protocol for `ComputeBackendService` Feature Add the `loadBalancerType`, `datapathProvider`, and `notificationConfig` fields to `ContainerCluster` ## October 02, 2020 Fixed Fixed an issue where an IAMPolicy cannot be deleted when the externally referenced resource does not exist. Fixed Fixed an infinite diff condition on spec.minMasterVersion. Feature Added Cloud IAM support for ComputeImage. ## September 03, 2020 Feature `BigtableInstance`: `numNodes` on resources is now optional. You can then [programmatically scale your Bigtable instances](https://docs.cloud.google.com/bigtable/docs/scaling). You cannot add the `numNodes` field after creating a `BigtableInstance`. For production instances where the numNodes will be managed by Config Connector, this field is required with a minimum of 1. For a development instance or for an existing instance where the numNodes is managed outside of Config Connector, this field must be left unset. ## August 27, 2020 Change Support referencing org-level IAM custom roles for IAMPolicy/IAMPolicyMember Fixed Increase support for cross-project references ## August 19, 2020 Feature Add support for configuring Bigtable garbage collection policies with the `BigtableGCPolicy` resource Fixed Fix issue where Deletion Defender would sometimes panic during uninstallation of Config Connector, preventing uninstallation to complete. Fixed Fixes issue where `SQLUser` would constantly update despite there being no changes. Fixed Performance improvements. ## August 13, 2020 Feature The Config Connector [GKE Add-on](https://docs.cloud.google.com/config-connector/docs/how-to/install-upgrade-uninstall#installing_kcc) is launched to GA. Users can now enable the GKE Add-on on cluster creation with the `gcloud` CLI or on the Cloud Console. Feature Add support for `BigtableAppProfile` ## August 08, 2020 Fixed Fix a bug where a CRD would be marked as uninstalling on a dryrun delete Feature Added support for `BigtableTable` ## July 31, 2020 Feature Changes `DataflowJob` to allow for `spec.parameters` and `spec.ipConfiguration` to be updateable Fixed Fixes issue that was causing `ContainerNodePool` and `SQLDatabase` to display `UpdateFailed` due to the referenced `ContainerCluster` or `SQLDatabase` not being ready Feature Add support for `ArtifactRegistryRepository` Fixed Fixes issue preventing the creation of BigQuery resources that read from Google Drive files due to insufficient OAuth 2.0 scopes Fixed Fixes issue causing `SourceRepoRepository` to constantly update even when there were no changes ## July 21, 2020 Fixed bug fixes and performance improvements ## July 16, 2020 Feature Add support for allowing fields not specified by the user to be externally-managed (i.e. changeable outside of Config Connector). This feature can be enabled for a resource by enabling K8s server-side apply for the resource, which will be the default for all K8s resources starting in K8s 1.18. More detailed docs about the feature coming soon. Fixed Fix OOM issue for the `cnrm-resource-stats-recorder` pod ([Issue #239](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/239)). Feature Add support for `projectViewer` prefix for members in `IAMPolicy` and `IAMPolicyMember` ([Issue #234](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/234)). Fixed Fix `ContainerCluster` validation issue ([Issue #242](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/242)). Feature Operator improvement: add support for cluster-mode set-ups, which allows users to use one Google Service Account for all namespaces in their cluster. This is very similar to the traditional "Workload Identity" installation set-up. Change Reduce `spec.revisionHistoryLimit` for the `cnrm-stats-recorder` and `cnrm-webhook-manager` Deployments from 10 (the default) to 1. ## July 09, 2020 Feature Added support for `SecretManagerSecret` ## July 01, 2020 Feature Config Connector now supports [`--server-dry-run`](https://kubernetes.io/blog/2019/01/14/apiserver-dry-run-and-kubectl-diff/) for resource CRDs. Change Deprecate BigtableInstance's spec.deletionProtection field. Fixed Fix a bug for the BigtableInstance resource that causes constant reconciliation. ## June 25, 2020 Feature Add an option, iam-format, to config-connector to control IAM output, options are policy, policymember, or none. Feature ComputeForwardingRule's target field now supports referencing a ComputeTargetSSLProxy and ComputeTargetTCPProxy. Change DataFlowJob's serviceAccountEmail, network, subnetwork, machineType, and ipConfiguration fields now support updates. Fixed Fix an issue where config-connector would error on a Project resource. ## June 16, 2020 Feature You can use `config-connector` tool to export Google Cloud resources into Config Connector: [documentation](https://docs.cloud.google.com/config-connector/docs/how-to/importing-existing-resources) Fixed Bug fixes ## June 12, 2020 Feature - Added ability to [update streaming DataflowJobs](https://docs.cloud.google.com/dataflow/docs/guides/updating-a-pipeline) by updating its spec (e.g. `spec.templateGcsPath`). Note that not all fields can be updated, and batch DataflowJobs don't support updates. - Added `IAMPolicy` to the output of `config-connector` ## June 03, 2020 Change Miscellaneous bug fixes and improvements ## May 29, 2020 Fixed Fixed support for [autoscaling and manually resizing node pools with ContainerNodePool](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/165) Change Added support for `SQLSSLCert` Change Supported acquisition of backends added to Compute Backend Services out-of-band of Config Connector ## May 27, 2020 Change Added support for `BigQueryJob` resource ## May 19, 2020 Fixed Improving handling of scenarios when `version` field on `ContainerNodePool` is updated externally Fixed Bug fixes and reliability improvements ## May 15, 2020 Fixed fix ContainerNodePool version upgrade scenario Change increase the cpu/memory request for webhook and recorder Change Miscellaneous bug fixes and improvement ## April 30, 2020 Change Reduced memory requirements for deletion defender, recorder, and webhook. Reduced cpu requirements for recorder and webhook Increased CPU for the manager controller from 100m to 200m. Change Fixes for the examples for the following resources: CloudBuildTrigger, AccessContextManager, ComputeDisk, and ComputeSubNetwork Change Ensure the webhook process does not signal it is ready until it is serving HTTP traffic ## April 21, 2020 Change Miscellaneous bug fixes and improvements ## April 14, 2020 Change Added readiness probes to Config Connector pods ## April 10, 2020 Change miscellaneous bug fixes and improvements Feature Add the CloudBuildTrigger resource Add the SourceRepoRepository resource ## April 02, 2020 Fixed Fixed the [ComputeInstance idempotency issue](https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/103) ## March 25, 2020 Feature Add support for structured metadata list for ComputeInstance and ComputeInstanceTemplate in the form of a spec.metadata field. Feature Add "Deletion Defender" workload -- a pod whose job is to ensure that only resources meant to trigger a delete on the underlying API do so. If this workload goes down for whatever reason, the controller is prevented from performing deletions, thus protecting against accidental deletions in the case of cascading deletions prompted by uninstalling CRDs. ## March 23, 2020 Change Bumped memory request and limit for the manager pod as resource usage has gone up and the original limit of 256 Mi was found to not be sufficient for large customers Change Changed admission webhooks to return non-200 error codes when denying admission Fixed Fixed label update issue on ContainerCluster (https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/110) ## March 18, 2020 Change miscellaneous bug fixes and improvements ## March 10, 2020 Feature ComputeHealthCheck's location field now supports supplying a region Feature Added a version annotation to the Config Connector manifests Fixed Fixed an issue with deleting StorageBucketAccessControl when the ServiceAccount did not exist: https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/39 Change With the exception of role-bindings, moved all system components for namespaced mode into the cnrm-system, note: you must completely uninstall and reinstall to upgrade namespaced mode completely for this release. ## February 26, 2020 Feature Added support for `DataflowJob` resource ## February 21, 2020 Feature Added support for `ComputeNetworkEndpointGroup` resource ## February 17, 2020 Feature Added support for `DNSPolicy` resource ## February 09, 2020 Feature Added support for `ComputeResourcePolicy` resource ## January 23, 2020 Feature Config Connector has reached [General Availability (GA)](https://cloud.google.com/products/#product-launch-stages). Feature Config Connector now supports configuring Google Cloud resources with sensitive data in GKE Secrets. Feature Config connector now supports authenticating to multiple Google Service Accounts using different Kubernetes Service accounts in your Config Connector cluster using [Namespaced mode](https://docs.cloud.google.com/config-connector/docs/how-to/install-upgrade-uninstall#choosing_your_installation_method). Feature Some Config Connector resources now support directives, which allow Config Connector to take additional actions beyond creating or deleting resources. For more information, see [Resources](https://docs.cloud.google.com/config-connector/docs/concepts/resources#directives) ## January 09, 2020 Feature Added support for `DNSRecordSet`, `Project` and `ServiceUsage` resources ## January 02, 2020 Feature Improved initial Prometheus metrics Feature Added external resource reference support for `IAMPolicy` and `IAMPolicyMember` ## December 23, 2019 Change No longer run system components as root Change Add a specific ResourceReference structure to IAMPolicy and IAMPolicyMember Feature Add initial support for exporting prometheus metrics Feature Add support for ComputeNodeTemplate ## December 17, 2019 Feature Added the `external` field to support the external resource references Feature Added support for ComputeTargetTCPProxy ## December 12, 2019 Feature Added support for SpannerDatabase ## November 26, 2019 Feature Added support for ServiceNetworkingConnection and ComputeTargetHTTPSProxy ## November 21, 2019 Feature Added support for ComputeInterconnectAttachment, ComputeSSLProxy, ComputeTargetSSLProxy, (Regional)ComputeDisk ## November 06, 2019 Feature Added support for FirestoreIndex, ComputeRouterInterface, ComputeRoute, ComputeRouterPeer ## November 01, 2019 Feature New resources supported: IAMPolicyMember, BigQueryTable, ComputeVPNTunnel, ComputeImage, ComputeSnapshot, ComputeBackendBucket, ComputeDisk, ComputeSSLCertificate, ComputeHTTPHealthCheck, ComputeRouterNAT, ComputeExternalVPNGateway, ComputeRouter, ComputeVPNTunnel, DNSManagedZone, StorageNotification Breaking Breaking namespace changes for the following resources: - GlobalComputeAddress: v1alpha2-\>v2apha3 - ComputeNetwork: v1alpha2-\>v1alpha3 - ComputeSubnetwork: v1alpha2-\>v1alpha3 - ComputeBackendService: v1alpha2-\>v1alpha3 - ComputeHealthCheck: v1alpha2-\>v1alpha3 - ComputeFirewall: v1alpha2-\>v1alpha3 ## October 22, 2019 Feature Added new resources and [samples](https://github.com/GoogleCloudPlatform/k8s-config-connector/tree/master/samples) for BigQueryTable, ComputeExternalVPNGateway ## October 15, 2019 Change Bump compute api group version to v1alpha2 - rename ComputeGlobalForwardingRule to ComputeForwardingRule - add required location field to the following existing resources: ComputeAddress, ComputeBackendService, ComputeForwardingRule, ComputeHealthCheck, ComputeTargetHttpProxy, ComputeURLMap - ComputeAddress CRD now supports both global and regional compute addresses Feature Add the following new resources with [samples](https://github.com/GoogleCloudPlatform/k8s-config-connector/tree/master/samples): ComputeNetworkPeering, ComputeTargetVPNGateway, ComputeVpnGateway, IAMCustomRole, ComputeHTTPSHealthCheck, ComputeSharedVPCHostProject, ComputeRouter ## October 08, 2019 Change New `gcp` category in CRDs, so you can view Config Connector resources via `kubectl get gcp` ## September 30, 2019 Feature Config Connector now supports GKE [workload identity](https://docs.cloud.google.com/config-connector/docs/how-to/install-upgrade-uninstall#choosing_your_installation_method) Feature Added the ContainerNodePool resource ## September 20, 2019 Feature Adding ComputeGlobalForwardingRule resource and examples ## September 13, 2019 Fixed Fixed an issue with creating service account keys across projects. ## September 09, 2019 Change Update samples for version 0.1.2 ## September 03, 2019 Feature Added ComputeTargetHTTPProxy, ComputeBackendService, ComputeFirewall, ComputeUrlMap resources Change Samples updates for newly added resources, as well bigtablecluster, bigtableinstance, iampolicy ## August 16, 2019 Feature Config Connector v0.1.1 is now available in Beta.