[renovate]

This PR contains the following updates:

Package	Type	Update	Change
kubernetes (source)	required_provider	minor	3.2.1 → 3.4.0

---

Release Notes

hashicorp/terraform-provider-kubernetes (kubernetes)

v3.4.0

Compare Source

BREAKING CHANGES:

• resource/kubernetes_role_v1: Setting both metadata.name and metadata.generate_name is now rejected during plan, including generate_name = "". Earlier versions allowed it, but the Kubernetes API ignores generate_name whenever name is set. To keep the existing Role, remove generate_name if it is empty (""); otherwise remove name and keep generate_name. Making the other change replaces the Role. [GH-2964]
• resource/kubernetes_role_v1: null is no longer accepted as a value in metadata.labels or metadata.annotations. Earlier versions accepted it and silently dropped the entry. [GH-2964]

BUG FIXES:

• provider: Bump google.golang.org/grpc to v1.83.2 and github.com/moby/spdystream to v0.5.1 to resolve GO-2026-6348, GO-2026-6443, and CVE-2026-35469. [GH-2986]

NOTES:

• resource/kubernetes_role_v1: Import IDs require a non-empty namespace and name. [GH-2964]
• resource/kubernetes_role_v1: Migrated from SDKv2 to the Plugin Framework, preserving configuration syntax and resource identity, including upgrades from versions before identity support. moved blocks from the deprecated kubernetes_role resource are supported with Terraform 1.8 or later. Explicit empty metadata maps may require a one-time in-place update. Roles imported with an earlier provider version may show a one-time in-place update setting empty labels and annotations to null, and a terraform plan -refresh=false immediately after upgrading may show a one-time in-place update adding resource_names = []; neither replaces the Role. Identity imports default an omitted namespace to default. See the Plugin Framework upgrade guide for details. [GH-2964]

v3.3.0

Compare Source

BREAKING CHANGES:

• resource/kubernetes_namespace_v1: Validate that metadata.labels and metadata.annotations entries contain non-null strings. Previously accepted null entries are now rejected during planning; omit those entries or provide string values. Entire maps may still be omitted or set to null. [GH-2979]

BUG FIXES:

• data-source/kubernetes_namespace_v1: Report a missing metadata.name during validation instead of failing during the namespace lookup. [GH-2960]
• resource/kubernetes_stateful_set_v1: Fix Missing Resource Identity After Update error when wait_for_rollout is true and the StatefulSet is updated in place [GH-2967]
• provider: Bump google.golang.org/grpc to v1.82.1 and golang.org/x/crypto to v0.52.0 to resolve upstream security advisories. [GH-2959]

NOTES:

• data-source/kubernetes_all_namespaces: Migrated from SDKv2 to the Plugin Framework. [GH-2962]
• data-source/kubernetes_namespace_v1: Migrated from SDKv2 to the Plugin Framework. [GH-2960]
• resource/kubernetes_namespace_v1: Migrated from terraform-plugin-sdk/v2 to terraform-plugin-framework, retaining the existing resource name and configuration block syntax. moved blocks from the deprecated kubernetes_namespace resource are supported. Explicitly empty metadata maps may produce a one-time in-place update after upgrading. [GH-2979]

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.