Set disbaleSsh default value to true for workstation create (#11225) (#7946)

[upstream:f1026bb86e56a759df42d1877d46e4b366be8247]

Signed-off-by: Modular Magician <[email protected]>

Author: modular-magician

Diff for: .changelog/11225.txt

@@ -0,0 +1,3 @@
+```release-note:breaking-change
+workstation: `host.gce_instance.disable_ssh` now defaults to true for `google_workstations_workstation_config`
+```

Diff for: google-beta/services/workstations/resource_workstations_workstation_config.go

@@ -355,6 +355,7 @@ See https://cloud.google.com/workstations/docs/reference/rest/v1beta/projects.lo
 										Type:        schema.TypeBool,
 										Optional:    true,
 										Description: `Whether to disable SSH access to the VM.`,
+										Default:     true,
 									},
 									"enable_nested_virtualization": {
 										Type:     schema.TypeBool,
@@ -2008,7 +2009,7 @@ func expandWorkstationsWorkstationConfigHostGceInstance(v interface{}, d tpgreso
 	transformedDisableSsh, err := expandWorkstationsWorkstationConfigHostGceInstanceDisableSsh(original["disable_ssh"], d, config)
 	if err != nil {
 		return nil, err
-	} else if val := reflect.ValueOf(transformedDisableSsh); val.IsValid() && !tpgresource.IsEmptyValue(val) {
+	} else {
 		transformed["disableSsh"] = transformedDisableSsh
 	}
 

Diff for: website/docs/guides/version_6_upgrade.html.markdown

@@ -322,6 +322,12 @@ on the resource through Terraform and the default labels configured on the provi
 * The new output-only `effective_labels` field lists all of labels present on the resource
 in GCP, including the labels configured through Terraform, the system, and other clients.
 
+## Resource: `google_workstations_workstation_config`
+
+### `host.gce_instance.disable_ssh` now defaults to true
+
+* `disable_ssh` field now defaults to true. To enable SSH, please set `disable_ssh` to false.
+
 ## Removals
 
 ### Resource: `google_identity_platform_project_default_config` is now removed