Update Terraform github.com/GoogleCloudPlatform/cloud-foundation-fabric to v40.2.0

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
github.com/GoogleCloudPlatform/cloud-foundation-fabric	module	minor	v40.1.0 → v40.2.0

---

Release Notes

GoogleCloudPlatform/cloud-foundation-fabric (github.com/GoogleCloudPlatform/cloud-foundation-fabric)

v40.2.0

Compare Source

BLUEPRINTS

• [#​2278] Bump express from 4.18.2 to 4.19.2 in /blueprints/apigee/apigee-x-foundations/functions/instance-monitor (dependabot[bot])
• [#​2275] Add support for reserved_internal_range in net-vpc (sruffilli)
• [#​2277] Added missing apigee org attributes to apigee x foundations blueprint (apichick)
• [#​2279] Bump protobufjs, @​google-cloud/logging-bunyan and @​google-cloud/monitoring in /blueprints/apigee/apigee-x-foundations/functions/instance-monitor (dependabot[bot])
• [#​2274] Added apigee-x-foundations blueprint (apichick)
• [#​2243] Added new attributes Apigee organization and bumped up providers version (apichick)
• [#​2239] Update README.md (vicenteg)
• [#​2230] docs: 📝 fix error in phpIPAM terraform config by updating VPC pe… (PapaPeskwo)
• [#​2227] Bump golang.org/x/net from 0.17.0 to 0.23.0 in /blueprints/cloud-operations/unmanaged-instances-healthcheck/function/healthchecker (dependabot[bot])
• [#​2228] Bump golang.org/x/net from 0.17.0 to 0.23.0 in /blueprints/cloud-operations/unmanaged-instances-healthcheck/function/restarter (dependabot[bot])
• [#​2226] fix cloud sql PSA after module upgrade (simonebruzzechesse)
• [#​2220] Add tflint to pipelines (juliocc)
• [#​2218] incompatible change: Allow multiple PSA service providers in net-vpc module (ludoo)
• [#​2208] Updated diagram to better reflect PSC terminology (bswenka)
• [#​2207] feat(gke-cluster-standard): Add optional CiliumClusterWideNetworkPolicy (anthonyhaussman)
• [#​2201] Updating cloud-run-v2 terraform and some typos (bluPhy)
• [#​2191] FAST GCVE stage (eliamaldini)
• [#​2181] Bump express from 4.17.3 to 4.19.2 in /blueprints/gke/binauthz/image (dependabot[bot])
• [#​2174] Bump provider version to 5.18 to fix non-empty plan for google_notebooks_instance (wiktorn)
• [#​2171] incompatible change: Fix subnet configuration in cloud nat module (ludoo)
• [#​2168] Support advanced_datapath_observability in gke cluster standard module (ludoo)
• [#​2169] Add stub READMEs for the removed hub and spoke blueprints (ludoo)

DOCUMENTATION

• [#​2164] Updated CONTRIBUTING.md with a guide to cut a new release (sruffilli)

FAST

• [#​2267] Fix 0-bootstrap iam_by_principals not taking into account all principals (wiktorn)
• [#​2263] Update docs - gcp-network-admins -> gcp-vpc-network-admins (wiktorn)
• [#​2260] Remove data source from folder module (ludoo)
• [#​2253] Misc FAST fixes (juliocc)
• [#​2235] Update FAST logging (juliocc)
• [#​2233] Fix permissions for branch network dev - read sa (LucaPrete)
• [#​2221] Enable TFLint in FAST stages (juliocc)
• [#​2220] Add tflint to pipelines (juliocc)
• [#​2218] incompatible change: Allow multiple PSA service providers in net-vpc module (ludoo)
• [#​2219] Remove unused variables/locals from FAST (juliocc)
• [#​2215] Add new org policies to FAST (juliocc)
• [#​2210] Add support for quotas to project module (ludoo)
• [#​2206] Update the description and README for the tags variable (timothy-jabez)
• [#​2204] Align exported tfvars in FAST networking stages, add psc and proxy only subnets (ludoo)
• [#​2203] incompatible change: FAST security stage refactor (ludoo)
• [#​2196] Add variable to resman to control top-level folder IAM (juliocc)
• [#​2195] Allow r/o project factory SAs access to folder-level IAM (ludoo)
• [#​2191] FAST GCVE stage (eliamaldini)
• [#​2178] Add missing permission to org viewer custom role in FAST stage 0 (ludoo)
• [#​2172] Fix subnet names in FAST net stage c nva (ludoo)

MODULES

• [#​2275] Add support for reserved_internal_range in net-vpc (sruffilli)
• [#​2274] Added apigee-x-foundations blueprint (apichick)
• [#​2270] Cloud function CMEK key support (luigi-bitonti)
• [#​2272] New Bindplane cloud-config-container setup (simonebruzzechesse)
• [#​2269] Implement the full IAM interface for tags (ludoo)
• [#​2268] Add logging settings to folder module (ludoo)
• [#​2242] CloudSQL PSC Endpoints support (wiktorn)
• [#​2265] Fix failing E2E net-vpc test (wiktorn)
• [#​2264] Fix bug from output typo in new project-factory module (JanCVanB)
• [#​2262] Make Simple NVA route IAP traffic through NIC 0 (juliocc)
• [#​2261] Add Hybrid NAT support (juliocc)
• [#​2260] Remove data source from folder module (ludoo)
• [#​2247] Fix workstation-cluster module for private deployment (simonebruzzechesse)
• [#​2252] Add support for labels to GKE backup plans (ludoo)
• [#​2251] Fix factory ingress policy services in vpc-sc module (ludoo)
• [#​2248] Added missing identity when connectors API is enabled (jnahelou)
• [#​2246] Fixed issue with service networking DNS peering (apichick)
• [#​2243] Added new attributes Apigee organization and bumped up providers version (apichick)
• [#​2244] incompatible change: Removed BFD settings from net-vpn-ha module as it is not supported (apichick)
• [#​2241] Use default labels on pubsub subscription when no override is provided (wiktorn)
• [#​2238] fix: allow disabling node autoprovisioning (kumadee)
• [#​2234] Added build environment variables in cloud function v1 (luigi-bitonti)
• [#​2229] incompatible change: Refactor vpc-sc support in project module, add support for dry run (ludoo)
• [#​2226] fix cloud sql PSA after module upgrade (simonebruzzechesse)
• [#​2224] added missing option for exclusion scope (cmalpe)
• [#​2220] Add tflint to pipelines (juliocc)
• [#​2218] incompatible change: Allow multiple PSA service providers in net-vpc module (ludoo)
• [#​2216] Remove data source from net-vpc module (ludoo)
• [#​2214] Net LB App Internal Cross-Region recipe (ludoo)
• [#​2213] Add support for tags to GCS module (ludoo)
• [#​2211] Add project quotas factory (wiktorn)
• [#​2212] Add support for GCS soft-delete retention period (sruffilli)
• [#​2210] Add support for quotas to project module (ludoo)
• [#​2209] Add support for data cache to cloud sql module (ludoo)
• [#​2207] feat(gke-cluster-standard): Add optional CiliumClusterWideNetworkPolicy (anthonyhaussman)
• [#​2205] Add validation rule for DNS module health check targets (ludoo)
• [#​2201] Updating cloud-run-v2 terraform and some typos (bluPhy)
• [#​2202] added force_destroy to dns module (nika-pr)
• [#​2191] FAST GCVE stage (eliamaldini)
• [#​2190] VPC module - PSA configurable service producer (spica29)
• [#​2185] Fix failing e2e tests for Cloud Run CMEK (wiktorn)
• [#​2182] incompatible change: Fix default nodepool defaults in gke standard module (ludoo)
• [#​2177] add cmek option for cloud_run_v2 (SalehElnagarSecurrency)
• [#​2175] feat(gke-cluster-standard): Set optional default_node_pool configuration (anthonyhaussman)
• [#​2174] Bump provider version to 5.18 to fix non-empty plan for google_notebooks_instance (wiktorn)
• [#​2171] incompatible change: Fix subnet configuration in cloud nat module (ludoo)
• [#​2170] Support optional secondary ranges in net-cloudnat module (ludoo)
• [#​2168] Support advanced_datapath_observability in gke cluster standard module (ludoo)
• [#​2166] feat(net-cloudnat): add tcp_time_wait to config_timeouts (frits-v)

TOOLS

• [#​2225] Generalization of tflint call for FAST stages (wiktorn)
• [#​2221] Enable TFLint in FAST stages (juliocc)
• [#​2220] Add tflint to pipelines (juliocc)
• [#​2214] Net LB App Internal Cross-Region recipe (ludoo)
• [#​2192] Update labeler version (ludoo)
• [#​2189] Use explicit UTF-8 encoding in tfdoc.py (wiktorn)
• [#​2163] feat: add e2e test for pubsub module (andybubu)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.