fix(deps)!: Update Terraform terraform-google-modules/kubernetes-engine/google to v39 - autoclosed

[renovate]

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

---

This PR contains the following updates:

Package	Type	Update	Change	Pending
terraform-google-modules/kubernetes-engine/google (source)	module	major	~> 24.0 -> ~> 39.0	40.0.0

---

Release Notes

terraform-google-modules/terraform-google-kubernetes-engine (terraform-google-modules/kubernetes-engine/google)

v39.0.0

Compare Source

⚠ BREAKING CHANGES

• TPG >= 6.47: add support for lustre csi driver (#​2433)
• TPG>=6.47: add support for rbac_binding_config (#​2401)

Features

• add enable_k8s_beta_apis support (#​2387) (090781d)
• add support for additional_pod_ranges_config (#​2435) (8b6a803)
• TPG >= 6.47: add support for lustre csi driver (#​2433) (b56546d)
• TPG>=6.47: add support for rbac_binding_config (#​2401) (2c8b78d)

Bug Fixes

• Add the nodepool cgroup mode to the NAP config (#​2356) (eeaf95d)
• Avoid flapping network_tags when insecure_kubelet_readonly_port_enabled is non-null (#​2439) (0ffe3f9)
• Make GKE components ADC compatible (#​2440) (74d37d8)
• typo in taint dynamic block in main.tf for gke-node-pools module (#​2424) (0848345)

v38.1.0

Compare Source

Features

• deps: Update Terraform Google Provider to v7 (major) (#​2425) (6967a8f)

Bug Fixes

• note org support of Identity Service for GKE (#​2422) (893ba59)

v38.0.1

Compare Source

Bug Fixes

• metadata: update ADC roles and services per module (#​2414) (2a78f09)

v38.0.0

Compare Source

⚠ BREAKING CHANGES

• add data cache count (#​2404)
• TPG>=6.42: add support for gke_auto_upgrade_config (#​2395)
• add support for flex start (#​2386)
• TPG>=6.41: add support performance_monitoring_unit (#​2391)
• TPG>=6.39: Fleet app operator permissions custom roles (#​2377)

Features

• add data cache count (#​2404) (85c0487)
• add support for cluster level total_egress_bandwidth_tier (#​2394) (1b69e34)
• add support for flex start (#​2386) (c0c80e6)
• Simple GKE modules for ADC (#​2397) (1859b17)
• TPG>=6.39: Fleet app operator permissions custom roles (#​2377) (c008237)
• TPG>=6.41: add support performance_monitoring_unit (#​2391) (e5ade9c)
• TPG>=6.42: add support for gke_auto_upgrade_config (#​2395) (19a0929)

Bug Fixes

• wrap cgroup_mode coalesce with try() to handle empty values (#​2396) (6148cb7)

v37.1.0

Compare Source

Features

• add autopilot confidential nodes example (#​2289) (486d17a)
• add ip_endpoints_enabled variable (#​2380) (9195380)
• add support for in_transit_encryption_config (#​2370) (e89d29b)
• add support for max_run_duration (#​2374) (d80316b)
• add support for multi networking (#​2385) (e4223ac)
• add support for windows config (#​2375) (6b9749f)
• ip_range_services to optional value (#​1949) (#​2365) (b62bd0b)
• safer-cluster: add support for gcs fuse csi driver (#​2384) (3028500)

Bug Fixes

• remove default-pool beta gate for boot_disk_kms_key (#​2378) (b405ea5)

v37.0.0

Compare Source

⚠ BREAKING CHANGES

• autopilot: remove ip-masq configmap (#​2364)
• TPG>=6.38: bump hpa_profile to GA (#​2362)
• TPG>=6.36: add storage_pools support (#​2326)
• TPG>=6.33: allow update in-place for enable_gvnic and enable_confidential_nodes (#​2359)
• TPG>=6.28: add support for disable_l4_lb_firewall_reconciliation (#​2338)
• dns_allow_external_traffic on private clusters (#​2334)
• TPG>=6.27: add support for HPA profile + logs (#​2323)

Features

• add JOBSET to monitoring_enabled_components (#​2336) (e55529d)
• add local_ssd_encryption_mode (#​2328) (95171f6)
• add new kubelet params (#​2337) (17e1c71)
• add support for hugepages_config (#​2223) (cf71718)
• add tpu_topology and policy_name args in placement_policy (#​2363) (8fdfd20)
• TPG>=6.27: add support for HPA profile + logs (#​2323) (8e33d19)
• TPG>=6.28: add support for disable_l4_lb_firewall_reconciliation (#​2338) (132a981)
• TPG>=6.33: allow update in-place for enable_gvnic and enable_confidential_nodes (#​2359) (380fa36)
• TPG>=6.36: add storage_pools support (#​2326) (85efdc1)
• TPG>=6.38: bump hpa_profile to GA (#​2362) (c80e88f)

Bug Fixes

• autopilot: remove ip-masq configmap (#​2364) (9dce230)
• dns_allow_external_traffic on private clusters (#​2334) (1c6ff12)
• Invalid index for google_container_cluster.primary.private_cluster_config[0] (#​2354) (552b3f4)
• support for SHORT_LIVED strategy (#​2352) (f3417b1)

v36.3.0

Compare Source

Features

• support parallelstore csi driver (#​2203) (ab9d4cb)
• support total_egress_bandwidth_tier (#​2207) (2bd9cbd)

v36.2.0

Compare Source

Features

• add dns_allow_external_traffic (#​2313) (9124dbe)
• add hyperdisk confidential node pool to the confidential safer cluster example (#​2311) (260be87)
• cgroup: add support for configuring Linux cgroup mode in autopilot clusters (#​2282) (5069034)
• safer-cluster: add support for observability_metrics and _relay (#​2291) (3cd930c)

Bug Fixes

• Update files with correct values for enterprise config (#​2314) (cf4cee7)

v36.1.0

Compare Source

Features

• add confidential nodes example (#​2227) (2ae739b)
• add enterprise config (#​2298) (adaabbf)
• add node_affinity (#​2295) (0e7a249)
• Add possibility to setup private nodes pool if global configuration is different (#​2290) (aadc860)
• Make autoscaling resource limits optional (#​2301) (99fc4ce)
• workload_identity - add image pull secrets (#​2276) (8d5c9a4)

Bug Fixes

• network_config with just enable_private_nodes (#​2292) (d49c3bf)

v36.0.2

Compare Source

Bug Fixes

• deps: Update Terraform terraform-google-modules/kubernetes-engine/google to v36 (#​2269) (c3e1a8d)

v36.0.1

Compare Source

Bug Fixes

• grant_registry_access gate serviceUsageConsumer (#​2266) (69eca65)

v36.0.0

Compare Source

⚠ BREAKING CHANGES

• remove ACM sub-module (#​2236)
• remove ASM sub-module (#​2168)
• re-align node_config_defaults to cluster types (#​2256)
• TPG>=6.14: promote enable_fqdn_network_policy to GA (#​2225)

Features

• add serviceUsageConsumer to SA for GCFS (#​2262) (bb7ec93)
• Add support for CMEK in Autopilot GKE module (#​2230) (1c08b99)
• add support for custom monitoring metrics writer role (#​2239) (4aad5e9)
• autopilot: add insecure_kubelet_readonly_port_enabled (#​2252) (47a49ac)
• remove ACM sub-module (#​2236) (6734dc7)
• remove ASM sub-module (#​2168) (010e034)
• TPG>=6.14: promote enable_fqdn_network_policy to GA (#​2225) (2c32408)

Bug Fixes

• apply all valid configurations for cluster_dns_provider (#​1805) (c7faa01)
• dns endpoint for external traffic (#​2244) (4726ab2)
• main: unmark endpoint as sensitive (#​2249) (2566fec)
• node pool creation should depend on necessary firewall rules (#​2245) (8098489)
• private-cluster: master_ipv4_cidr_block on enable_private_nodes (#​2250) (3ecf473)
• re-align node_config_defaults to cluster types (#​2256) (4df226d)
• remove fuse csi driver from autopilot (#​2218) (271af34)

v35.0.1

Compare Source

Bug Fixes

• min_cpu_platform ref in cluster autoscaling (#​2208) (f48e732)
• node_pools_cgroup_mode var does not correctly handle the "all" map key (#​2224) (53b1a50)

v35.0.0

Compare Source

⚠ BREAKING CHANGES

• master_ipv4_cidr_block optional for private standard clusters (#​2186)
• TPG>=6.11: add endpoint_dns (#​2180)
• update-variant: allow updating disk_type, disk_size_gb, machine_type, enable_gcfs in place (#​2195)
• TPG>=6.8.0: add KCP log params (#​2166)
• private-cluster: use private endpoint (#​2189)
• Change the default value of "monitoring_enable_managed_prometheus" var to null (#​2188)
• TPG>=6.5.0: promote enable_gcfs to GA (#​2178)
• TPG>=6.7.0: promote secret_manager_config to GA (#​2159)
• TPG>=6.5.0: support gcp_filestore_csi_driver_config for autopilot (#​2126)

Features

• add logging_config and monitoring_config to autopilot modules (#​2155) (0ebdfda)
• Change the default value of "monitoring_enable_managed_prometheus" var to null (#​2188) (31a1619)
• deps: Update Terraform Google Provider to >= 6.7.0, < 6.11.0 (#​2184) (d73e2e9)
• master_ipv4_cidr_block optional for private standard clusters (#​2186) (e0ea8e7)
• Node pools can enable fast_socket (#​2200) (f23d52f)
• promote additive_vpc_scope_dns_domain to GA (#​2194) (43d1c56)
• TPG>=6.11: add endpoint_dns (#​2180) (1f85f66)
• TPG>=6.5.0: promote enable_gcfs to GA (#​2178) (eb9b0be)
• TPG>=6.5.0: support gcp_filestore_csi_driver_config for autopilot (#​2126) (e3f016e)
• TPG>=6.7.0: promote secret_manager_config to GA (#​2159) (7931bf4)
• TPG>=6.8.0: add KCP log params (#​2166) (9a1f4ea)
• update-variant: allow updating disk_type, disk_size_gb, machine_type, enable_gcfs in place (#​2195) (276cbdb)

Bug Fixes

• enable TPG v6.11+ (#​2197) (e9ab0df)
• limit TPG < 6.10 (#​2183) (3122b9d)
• node pool options cannot be set to false (#​2187) (752db66)
• private-cluster: use private endpoint (#​2189) (4b155cd)
• standardize to >= TF v1.3 (#​2202) (a99aec2)
• TPG>=5.12.0: Bump for #​2142 (#​2141) (#​2170) (52f8bea)

v34.0.0

Compare Source

⚠ BREAKING CHANGES

• TPG>=5.44.2: add standard cluster support for insecureKubeletReadonlyPortEnabled (#​2082)
• deps: Update Terraform terraform-google-modules/project-factory/google to v17 (#​2109)

Features

• Add create_ignore_already_exists to workload_identity (#​2142) (76d779c)
• safer-cluster: add create_service_account variable (#​2138) (cccabcb)
• TPG>=5.44.2: add standard cluster support for insecureKubeletReadonlyPortEnabled (#​2082) (96626d5)

Bug Fixes

• add kubelet_config to default-pool (#​2147) (7828a0f)
• add target tags to node_pool_auto_config for standard clusters (#​2118) (d5f66e8)
• correct confidential node field name (#​2140) (373c969)
• deps: Update Terraform terraform-google-modules/project-factory/google to v17 (#​2109) (3073b04)
• fix typo in kube-dns-upstream-nameservers configmap (#​2149) (843c56c)
• node_pools: Update Variants: Add recreate for secondary_boot_disk and local_ssd_ephemeral_count (beta) (#​2139) (66231d5)
• remove dns from autopilot (#​2152) (2e645cd)
• remove unnecessary lookup for safer_cluster nodepool ID (#​2160) (179a8ec)
• send provider enum values for insecureKubeletReadonlyPortEnabled (#​2145) (922ab1d)
• update resource names to snake_case (#​2151) (375d27c)

v33.1.0

Compare Source

Features

• add a flag to allow access through Google Cloud public IP addresses (#​2078) (2f412bb)
• added confidential-nodes flag for node-pools (#​2110) (b2a597b)
• enable L4 ILB subsetting support for safer clusters (#​2105) (0733908)

Bug Fixes

• acm: correct membership location (#​2128) (7cf9894)
• acm: use membership registration location (#​2123) (caa194f)
• allow changing enable_identity_service value in place (#​2132) (9c2191e)
• allow null enable_gcfs setting in defined nodepools (#​2111) (700a01d)
• autopilot: narrow version exclusion (#​2112) (620bf32)
• ignore control plane network when private endpoint subnet is set (#​2122) (a4b130d)

v33.0.4

Compare Source

Bug Fixes

• TPG < 6.2 for Autopilot (#​2101) (bff49e1)

v33.0.3

Compare Source

Bug Fixes

• correct gcfs_config value (#​2095) (1b7a845)

v33.0.2

Compare Source

Bug Fixes

• asm and auth allow TPGv6 (#​2092) (0ce1df6)
• no gcfs block when enable_gcfs null (#​2093) (f4c1af2)

v33.0.1

Compare Source

Bug Fixes

• avoid TPG v6.2.0 with Autopilot (#​2086) (fdd1287)

v33.0.0

Compare Source

⚠ BREAKING CHANGES

• beta-autopilot: enable gcfs by default (#​2066)
• TPG>=5.41: add config_sync.enabled (#​2074)
• update relay_mode to enable_relay (#​2067)
• private_cluster: enable private nodes by default (#​2064)
• deps: Update Terraform terraform-google-modules/project-factory/google to v16 (#​2057)

Features

• beta-autopilot: enable gcfs by default (#​2066) (a083437)
• deps: Update Terraform Google Provider to v6 (major) (#​2063) (8b7e342)
• private_cluster: enable private nodes by default (#​2064) (e11787c)
• support reservation affinity (#​2010) (7cc0626)

Bug Fixes

• avoid TPGv5.44.0 with Autopilot (#​2076) (f54d2e1)
• deps: Update Terraform terraform-google-modules/project-factory/google to v16 (#​2057) (8e53122)
• Node Pool enable_gcfs true:false (#​1976) (419078d)
• TPG>=5.41: add config_sync.enabled (#​2074) (4939c6f)
• update relay_mode to enable_relay (#​2067) (dafdd72)

v32.0.4

Compare Source

Bug Fixes

• allow enable_private_endpoint with no master_authorized_networks (#​2058) (528b373)

v32.0.3

Compare Source

Bug Fixes

• autopilot: option to configure gcfs (#​2052) (c1a720a)

v32.0.2

Compare Source

Bug Fixes

• autopilot: ignore gcfs null (#​2049) (5e0de62)

v32.0.1

Compare Source

Bug Fixes

• fleet_app_operator_permissions: enable multi use per project (#​2045) (a83100d)
• fleet_app_operator_permissions: optional groups and users (#​2044) ([a5a67e5](https://redirect.github.com/terraform-google-modules/terraform-google-kubernetes-engine/commit/a5a67e56fd343b66a8ba5b02cd

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dpebot]

/gcbrun