IAP deprecation for Terraform resources

[aanogueira]

Question

Howdy,

This is a follow up question related to this issue: #21378

Since IAP is being deprecated and according to Google Support: (ref)

In summary, after July 2025, the google_iap_brand and google_iap_client Terraform resources will no longer function as intended due to the deprecation of the IAP OAuth Admin API.

Shouldn't there be a deprecation message on these Terraform resources, that would warn about this deprecation?

If programmatically creating or managing OAuth brands via Terraform or the deprecated API will no longer be supported, this appears to be a ticketing time bomb that will explode due to the lack of visibility on the module side once we reach July, as any IaC that relies on either resource will blow up.

Maybe I'm missing some here, creating this issue for some feedback.

Thank you in advance 😄