chore(deps): update tf modules

0-bootstrap/cb.tf

@@ -70,7 +70,7 @@ resource "random_string" "suffix" {
 
 module "gcp_projects_state_bucket" {
   source  = "terraform-google-modules/cloud-storage/google//modules/simple_bucket"
-  version = "~> 4.0"
+  version = "~> 5.0"
 
   name          = "${var.bucket_prefix}-${module.seed_bootstrap.seed_project_id}-gcp-projects-tfstate"
   project_id    = module.seed_bootstrap.seed_project_id
@@ -86,7 +86,7 @@ module "gcp_projects_state_bucket" {
 
 module "tf_source" {
   source  = "terraform-google-modules/bootstrap/google//modules/tf_cloudbuild_source"
-  version = "~> 6.4"
+  version = "~> 7.0"
 
   org_id                = var.org_id
   folder_id             = google_folder.bootstrap.id
@@ -154,7 +154,7 @@ module "tf_private_pool" {
 
 module "tf_cloud_builder" {
   source  = "terraform-google-modules/bootstrap/google//modules/tf_cloudbuild_builder"
-  version = "~> 6.5"
+  version = "~> 7.0"
 
   project_id                   = module.tf_source.cloudbuild_project_id
   dockerfile_repo_uri          = module.tf_source.csr_repos[local.cloudbuilder_repo].url
@@ -205,7 +205,7 @@ module "build_terraform_image" {
 
 module "tf_workspace" {
   source   = "terraform-google-modules/bootstrap/google//modules/tf_cloudbuild_workspace"
-  version  = "~> 6.4"
+  version  = "~> 7.0"
   for_each = local.granular_sa
 
   project_id                = module.tf_source.cloudbuild_project_id

0-bootstrap/main.tf

@@ -44,7 +44,7 @@ resource "google_folder" "bootstrap" {
 
 module "seed_bootstrap" {
   source  = "terraform-google-modules/bootstrap/google"
-  version = "~> 6.3"
+  version = "~> 7.0"
 
   org_id                         = var.org_id
   folder_id                      = google_folder.bootstrap.id

0-bootstrap/modules/cb-private-pool/network.tf

@@ -20,7 +20,7 @@ locals {
 
 module "peered_network" {
   source  = "terraform-google-modules/network/google"
-  version = "~> 8.0"
+  version = "~> 9.0"
   count   = var.private_worker_pool.create_peered_network ? 1 : 0
 
   project_id                             = var.project_id
@@ -90,7 +90,7 @@ resource "google_compute_network_peering_routes_config" "peering_routes" {
 
 module "firewall_rules" {
   source  = "terraform-google-modules/network/google//modules/firewall-rules"
-  version = "~> 7.0"
+  version = "~> 9.0"
   count   = var.private_worker_pool.enable_network_peering ? 1 : 0
 
   project_id   = var.project_id

0-bootstrap/modules/cb-private-pool/vpn_ha.tf

@@ -28,7 +28,7 @@ data "google_secret_manager_secret_version" "psk" {
 
 module "vpn_ha_cb_to_onprem" {
   source  = "terraform-google-modules/vpn/google//modules/vpn_ha"
-  version = "~> 2.3"
+  version = "~> 4.0"
   count   = var.vpn_configuration.enable_vpn ? 1 : 0
 
   project_id = var.project_id

0-bootstrap/modules/jenkins-agent/main.tf

@@ -128,7 +128,7 @@ resource "google_tags_tag_value" "jenkins_agents" {
 
 module "jenkins_firewall_rules" {
   source      = "terraform-google-modules/network/google//modules/network-firewall-policy"
-  version     = "~> 8.0"
+  version     = "~> 9.0"
   project_id  = module.cicd_project.project_id
   policy_name = "fp-${google_compute_network.jenkins_agents.name}-jenkins-firewall"
   description = "Jenkins Agent GCE network firewall rules."

0-bootstrap/modules/jenkins-agent/vpn_ha.tf

@@ -16,7 +16,7 @@
 
 module "vpn_ha_agent_to_onprem" {
   source  = "terraform-google-modules/vpn/google//modules/vpn_ha"
-  version = "~> 2.0"
+  version = "~> 4.0"
 
   project_id = module.cicd_project.project_id
   region     = var.default_region

0-bootstrap/modules/tfc-agent-gke/main.tf

@@ -34,7 +34,7 @@ resource "random_string" "suffix" {
 
 module "network" {
   source  = "terraform-google-modules/network/google"
-  version = "~> 5.2"
+  version = "~> 9.0"
 
   project_id                             = var.project_id
   network_name                           = var.network_name
@@ -94,7 +94,7 @@ resource "google_service_account" "tfc_agent_service_account" {
 
 module "tfc_agent_cluster" {
   source  = "terraform-google-modules/kubernetes-engine/google//modules/beta-autopilot-private-cluster/"
-  version = "~> 28.0"
+  version = "~> 29.0"
 
   project_id         = var.project_id
   region             = var.region
@@ -370,7 +370,7 @@ resource "google_compute_firewall" "allow_private_api_egress" {
 
 module "private_service_connect" {
   source  = "terraform-google-modules/network/google//modules/private-service-connect"
-  version = "~> 5.2"
+  version = "~> 9.0"
 
   project_id                 = var.project_id
   dns_code                   = "dz-${local.vpc_name}"
@@ -392,7 +392,7 @@ resource "google_dns_policy" "default_policy" {
 
 module "hub" {
   source  = "terraform-google-modules/kubernetes-engine/google//modules/fleet-membership"
-  version = "~> 28.0"
+  version = "~> 29.0"
 
   project_id   = var.project_id
   location     = var.region

1-org/modules/cai-monitoring/main.tf

@@ -71,7 +71,7 @@ data "archive_file" "function_source_zip" {
 
 module "cloudfunction_source_bucket" {
   source  = "terraform-google-modules/cloud-storage/google//modules/simple_bucket"
-  version = "~>3.4"
+  version = "~> 5.0"
 
   project_id    = var.project_id
   name          = "bkt-cai-monitoring-${random_id.suffix.hex}-sources-${data.google_project.project.number}-${var.location}"
@@ -121,7 +121,7 @@ resource "google_cloud_asset_organization_feed" "organization_feed" {
 
 module "pubsub_cai_feed" {
   source  = "terraform-google-modules/pubsub/google"
-  version = "~> 5.0"
+  version = "~> 6.0"
 
   topic              = "top-cai-monitoring-${random_id.suffix.hex}-event"
   project_id         = var.project_id

3-networks-dual-svpc/envs/shared/dns-hub.tf

@@ -20,7 +20,7 @@
 
 module "dns_hub_vpc" {
   source  = "terraform-google-modules/network/google"
-  version = "~> 8.0"
+  version = "~> 9.0"
 
   project_id                             = local.dns_hub_project_id
   network_name                           = "vpc-c-dns-hub"
@@ -101,7 +101,7 @@ module "dns-forwarding-zone" {
 
 module "dns_hub_region1_router1" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-c-dns-hub-${local.default_region1}-cr1"
   project = local.dns_hub_project_id
@@ -115,7 +115,7 @@ module "dns_hub_region1_router1" {
 
 module "dns_hub_region1_router2" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-c-dns-hub-${local.default_region1}-cr2"
   project = local.dns_hub_project_id
@@ -129,7 +129,7 @@ module "dns_hub_region1_router2" {
 
 module "dns_hub_region2_router1" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-c-dns-hub-${local.default_region2}-cr3"
   project = local.dns_hub_project_id
@@ -143,7 +143,7 @@ module "dns_hub_region2_router1" {
 
 module "dns_hub_region2_router2" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-c-dns-hub-${local.default_region2}-cr4"
   project = local.dns_hub_project_id

3-networks-dual-svpc/modules/base_shared_vpc/firewall.tf

@@ -19,7 +19,7 @@
  *****************************************/
 module "firewall_rules" {
   source      = "terraform-google-modules/network/google//modules/network-firewall-policy"
-  version     = "~> 8.0"
+  version     = "~> 9.0"
   project_id  = var.project_id
   policy_name = "fp-${var.environment_code}-dual-svpc-base-firewalls"
   description = "Firewall rules for base dual shared vpc: ${module.main.network_name}."

3-networks-dual-svpc/modules/base_shared_vpc/main.tf

@@ -26,7 +26,7 @@ locals {
 
 module "main" {
   source  = "terraform-google-modules/network/google"
-  version = "~> 8.0"
+  version = "~> 9.0"
 
   project_id                             = var.project_id
   network_name                           = local.network_name
@@ -92,7 +92,7 @@ resource "google_service_networking_connection" "private_vpc_connection" {
 
 module "region1_router1" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-${local.vpc_name}-${var.default_region1}-cr1"
   project = var.project_id
@@ -107,7 +107,7 @@ module "region1_router1" {
 
 module "region1_router2" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-${local.vpc_name}-${var.default_region1}-cr2"
   project = var.project_id
@@ -122,7 +122,7 @@ module "region1_router2" {
 
 module "region2_router1" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-${local.vpc_name}-${var.default_region2}-cr3"
   project = var.project_id
@@ -137,7 +137,7 @@ module "region2_router1" {
 
 module "region2_router2" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-${local.vpc_name}-${var.default_region2}-cr4"
   project = var.project_id

3-networks-dual-svpc/modules/base_shared_vpc/private_service_connect.tf

@@ -17,7 +17,7 @@
 
 module "private_service_connect" {
   source  = "terraform-google-modules/network/google//modules/private-service-connect"
-  version = "~> 7.0"
+  version = "~> 9.0"
 
   project_id                 = var.project_id
   dns_code                   = "dz-${var.environment_code}-shared-base"

3-networks-dual-svpc/modules/dedicated_interconnect/main.tf

@@ -23,7 +23,7 @@ locals {
 
 module "interconnect_attachment1_region1" {
   source  = "terraform-google-modules/cloud-router/google//modules/interconnect_attachment"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "vl-${var.region1_interconnect1_onprem_dc}-${var.region1_interconnect1_location}-${var.vpc_name}-${var.region1}-${local.suffix1}"
   project = var.interconnect_project_id
@@ -46,7 +46,7 @@ module "interconnect_attachment1_region1" {
 
 module "interconnect_attachment2_region1" {
   source  = "terraform-google-modules/cloud-router/google//modules/interconnect_attachment"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "vl-${var.region1_interconnect2_onprem_dc}-${var.region1_interconnect2_location}-${var.vpc_name}-${var.region1}-${local.suffix2}"
   project = var.interconnect_project_id
@@ -69,7 +69,7 @@ module "interconnect_attachment2_region1" {
 
 module "interconnect_attachment1_region2" {
   source  = "terraform-google-modules/cloud-router/google//modules/interconnect_attachment"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "vl-${var.region2_interconnect1_onprem_dc}-${var.region2_interconnect1_location}-${var.vpc_name}-${var.region2}-${local.suffix3}"
   project = var.interconnect_project_id
@@ -92,7 +92,7 @@ module "interconnect_attachment1_region2" {
 
 module "interconnect_attachment2_region2" {
   source  = "terraform-google-modules/cloud-router/google//modules/interconnect_attachment"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "vl-${var.region2_interconnect2_onprem_dc}-${var.region2_interconnect2_location}-${var.vpc_name}-${var.region2}-${local.suffix4}"
   project = var.interconnect_project_id

3-networks-dual-svpc/modules/restricted_shared_vpc/firewall.tf

@@ -20,7 +20,7 @@
  *****************************************/
 module "firewall_rules" {
   source      = "terraform-google-modules/network/google//modules/network-firewall-policy"
-  version     = "~> 8.0"
+  version     = "~> 9.0"
   project_id  = var.project_id
   policy_name = "fp-${var.environment_code}-dual-svpc-restricted-firewalls"
   description = "Firewall rules for restricted dual shared vpc: ${module.main.network_name}."

3-networks-dual-svpc/modules/restricted_shared_vpc/main.tf

@@ -26,7 +26,7 @@ locals {
 
 module "main" {
   source  = "terraform-google-modules/network/google"
-  version = "~> 8.0"
+  version = "~> 9.0"
 
   project_id                             = var.project_id
   network_name                           = local.network_name
@@ -96,7 +96,7 @@ resource "google_service_networking_connection" "private_vpc_connection" {
 
 module "region1_router1" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-${local.vpc_name}-${var.default_region1}-cr5"
   project = var.project_id
@@ -111,7 +111,7 @@ module "region1_router1" {
 
 module "region1_router2" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-${local.vpc_name}-${var.default_region1}-cr6"
   project = var.project_id
@@ -126,7 +126,7 @@ module "region1_router2" {
 
 module "region2_router1" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-${local.vpc_name}-${var.default_region2}-cr7"
   project = var.project_id
@@ -141,7 +141,7 @@ module "region2_router1" {
 
 module "region2_router2" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-${local.vpc_name}-${var.default_region2}-cr8"
   project = var.project_id

3-networks-dual-svpc/modules/restricted_shared_vpc/private_service_connect.tf

@@ -17,7 +17,7 @@
 
 module "private_service_connect" {
   source  = "terraform-google-modules/network/google//modules/private-service-connect"
-  version = "~> 7.0"
+  version = "~> 9.0"
 
   project_id                 = var.project_id
   dns_code                   = "dz-${var.environment_code}-shared-restricted"

3-networks-dual-svpc/modules/restricted_shared_vpc/service_control.tf

@@ -26,7 +26,7 @@ resource "random_id" "random_access_level_suffix" {
 
 module "access_level_members" {
   source  = "terraform-google-modules/vpc-service-controls/google//modules/access_level"
-  version = "~> 4.0"
+  version = "~> 5.0"
 
   description = "${local.prefix} Access Level"
   policy      = var.access_context_manager_policy_id
@@ -61,7 +61,7 @@ resource "time_sleep" "wait_vpc_sc_propagation" {
 
 module "regular_service_perimeter" {
   source  = "terraform-google-modules/vpc-service-controls/google//modules/regular_service_perimeter"
-  version = "~> 4.0"
+  version = "~> 5.0"
 
   policy         = var.access_context_manager_policy_id
   perimeter_name = local.perimeter_name