SWP: allow fields certificateUrls, gatewaySecurityPolicy to be updated

[liudmila-udot]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request.
• Please do not leave +1 or me too comments, they generate extra noise for issue followers and do not help prioritize the request.
• If you are interested in working on this issue or have submitted a pull request, please leave a comment.
• If an issue is assigned to a user, that user is claiming responsibility for the issue.
• Customers working with a Google Technical Account Manager or Customer Engineer can ask them to reach out internally to expedite investigation and resolution of this issue.

Description

Now certificate_urls field annotated with ForceNew

terraform-provider-google/google/services/networkservices/resource_network_services_gateway.go

Lines 208 to 217 in 54690b5

	"certificate_urls": {
	Type: schema.TypeList,
	Optional: true,
	ForceNew: true,
	Description: `A fully-qualified Certificates URL reference. The proxy presents a Certificate (selected based on SNI) when establishing a TLS connection.
	This feature only applies to gateways of type 'SECURE_WEB_GATEWAY'.`,
	Elem: &schema.Schema{
	Type: schema.TypeString,
	},
	},

. That makes certificate rotations process very disruptive - causing ~1m of gateway unavailability.

PATCH API itself supports updating certificate_urls: https://cloud.google.com/api-gateway/docs/reference/rest/v1/projects.locations.gateways/patch

Same issue was discussed here: #14600

New or Affected Resource(s)

• google_network_services_gateway

Potential Terraform Configuration

Tests are already written
https://github.com/GoogleCloudPlatform/magic-modules/blob/cb9e3ed179edc64b4b0021e4966680259914a29e/mmv1/third_party/terraform/services/networkservices/resource_network_services_gateway_test.go#L172

We just have to uncomment them and delete immutable in 2 places:

• https://github.com/GoogleCloudPlatform/magic-modules/blob/cb9e3ed179edc64b4b0021e4966680259914a29e/mmv1/products/networkservices/Gateway.yaml#L195
• https://github.com/GoogleCloudPlatform/magic-modules/blob/cb9e3ed179edc64b4b0021e4966680259914a29e/mmv1/products/networkservices/Gateway.yaml#L202

References

#14600

b/337872944