gitlab_deploy_token doesn't support *_virtual_registry scopes

Bug Report

Deploy tokens don't support all scopes described in the documentation (Deploy Token Scopes), attempting to use read_virtual_registry or write_virtual_registry causes validation to fail

Relevant Terraform Configuration

resource "gitlab_deploy_token" "default" {
  project  = "bananas"
  name     = "Cluster deploy token"
  scopes = ["read_virtual_registry", "read_registry"]
}

Relevant Terraform Command

terraform validate

Relevant Log Output

These are the debug logs of the `terraform` command output:


│ Error: expected scopes.1 to be one of ["read_registry" "read_repository" "read_package_registry" "write_registry" "write_package_registry"], got read_virtual_registry

│   with module.banana.gitlab_deploy_token.default,
│   on .terraform/modules/banana/secrets.tf line 6, in resource "gitlab_deploy_token" "default":
│    6:   scopes = ["read_virtual_registry", "read_registry"]

Additional Details

  • GitLab Terraform Provider Version: `18.2.0`
  • GitLab Instance Version: `18.0.4-ee`
  • Tofu Version: `1.9.0`
  • License Tier: Premium