Skip to content

Update Terraform azurerm to v4.28.0 #3366

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Nov 8, 2024

This PR contains the following updates:

Package Type Update Change
azurerm (source) required_provider minor 4.16.0 -> 4.28.0

Release Notes

hashicorp/terraform-provider-azurerm (azurerm)

v4.28.0

Compare Source

FEATURES:

  • New Resource: azurerm_nginx_api_key (#​28919)
  • New Data Source: azurerm_nginx_api_key (#​28919)

ENHANCEMENTS:

  • dependencies: azurerm_mssql_database - Update to API version 2023-08-01-preview/replicationlinks (#​28705)
  • dependencies: azurerm_mssql_server_security_alert_policy - update to API version 2023-08-01-preview/serversecurityalertpolicies (#​29363)
  • dependencies: eventhub - update to API version 2024-01-01 (#​29397)
  • dependencies: azurerm_shared_image_version - update to API version 2024-03-01 (#​28954)
  • azurerm_ai_foundry_project - add support for the primary_user_assigned_identity property (#​29197)
  • azurerm_storage_account_static_website - the index_document property now has validation for length and excluding slashes (#​29431)

BUG FIXES:

  • azurerm_application_insights - the workspace_id is now Computed (#​29396)
  • azurerm_batch_pool - prevent error when certificate is not used (#​29443)
  • azurerm_nginx_deployment - add support for the web_application_firewall property (#​27454)
  • azurerm_postgresql_flexible_server_virtual_endpoint - is no longer removed from state when a fail-over occurs (#​29424)
  • azurerm_servicebus_queue - no longer waits on resource creation (#​29435)
  • azurerm_virtual_network_gateway - prevent a panic when vpn_client_configuration is removed from from the configuration (#​29456)
  • azurerm_web_pubsub_custom_certificate - no longer crashes when custom_certificate_id is in a different subscription (#​29410)
  • azurerm_windows_web_app - fix perpetual diff around incorrect default for always_on and ignore default values for logs.0.application_logs (#​29150)
  • azurerm_windows_web_app_slot - fix perpetual diff around incorrect default for always_on and ignore default values for logs.0.application_logs (#​29150)

v4.27.0

Compare Source

FEATURES:

  • New Resource: azurerm_eventgrid_partner_configuration (#​28676)

ENHANCEMENTS:

  • dependencies: update go-azure-sdk to v0.20250409.1192141 (#​29307)
  • dependencies: containerapps - update to API version 2025-01-01 (#​29296)
  • dependencies: netapp - update to API version 2025-01-01 (#​29382)
  • dependencies: operationalinsights - partial update to API version 2023-09-01 (#​29283)
  • azurerm_cdn_frontdoor_origin - support managedEnvironments value for private_link.target_type (#​28239)
  • azurerm_cdn_frontdoor_origin - add support for the web_secondary Gateway values in the private_link.target_type property (#​29380)
  • azurerm_cognitive_deployment - add support for the Cohere value in the model.format property (#​29143)
  • azurerm_container_app_environment: add support for cross subscription log_analytics_workspace_id (#​28740)
  • azurerm_dev_center_project - add support for the identity property (#​29278)
  • azurerm_dynatrace_tag_rules - the log_rule and metric_rule blocks and their properties are no longer ForceNew (#​29298)
  • azurerm_monitor_data_collection_endpoint - add support for the metrics_ingestion_endpoint attribute (#​29292)
  • azurerm_mysql_flexible_server - support for the log_on_disk_enabled property (#​28929)
  • azurerm_subnet - add support for the Microsoft.PowerAutomate/hostedRpa value in the delegation.service_delegation.name property (#​29271)
  • azurerm_subnet - add support for the Microsoft.Network/applicationGateways value in the delegation.service_delegation.name property (#​29361)
  • azurerm_virtual_network - add support for the Microsoft.PowerAutomate/hostedRpa value in the subnet.delegation.service_delegation.name property (#​29271)
  • azurerm_virtual_network - add support for the Microsoft.Network/applicationGateways value in the subnet.delegation.service_delegation.name property (#​29361)

BUG FIXES:

  • provider: ensure x-ms-correlation-request-id header is only set once during list operations (#​28974)
  • azurerm_app_configuration_feature - suppress casing differences for configuration_store_id to prevent resource recreation (#​29285)
  • azurerm_app_configuration_key - suppress casing differences for configuration_store_id to prevent resource recreation (#​29285)
  • azurerm_container_app_environment - updates are now made using the PATCH method, preventing errors due to missing properties in the request (#​29317)
  • azurerm_eventhub_namespace - remove max items from network/ip rules as they can be increased above upon request (#​29333)
  • azurerm_kusto_iothub_data_connection - update event_system_properties validation and documentation to be more flexible (#​29314)
  • azurerm_linux_web_app - correctly read backup.schedule.start_time into state (#​29254)
  • azurerm_netapp_volume - update validation for storage_quota_in_gb to allow values from 50 to 102400 (#​29341)
  • azurerm_postgresql_flexible_server - downgrading version forces a new resource to be created (#​28559)
  • azurerm_postgresql_flexible_server - downgrading storage_mb forces a new resource to be created (#​29309)
  • azurerm_private_endpoint - private_dns_zone_group.private_dns_zone_ids can now be updated correctly (#​29329)
  • azurerm_search_shared_private_link_service - add locks to prevent conflicts when creating multiple instances (#​29294)

v4.26.0

Compare Source

BREAKING CHANGES:

  • feature: The Provider feature configuration item virtual_machines.graceful_shutdown is now not used due to a breaking change in the compute API. This feature block setting is now deprecated and ignored if set and will be removed in v5.0 of the provider. (#​29185)
  • azurerm_linux_virtual_machine - the vm_agent_platform_updates_enabled property is now read-only due to a recent API breaking change (#​29211)
  • azurerm_windows_virtual_machine - the vm_agent_platform_updates_enabled property is now read-only due to a recent API breaking change (#​29211)

FEATURES:

  • New Data Source: azurerm_role_assignments (#​29214)

ENHANCEMENTS:

  • dependencies: azurerm_sentinel_automation_rule - update to API version 2024-09-01 (#​29240)
  • dependencies: devcenter - update to API version 2025-02-01 (#​29240)
  • dependencies: recoveryservices - partial update to API version 2024-10-01 (#​29240)
  • Data Source: azurerm_mssql_server - export the express_vulnerability_assessment_enabled property (#​29168)
  • azurerm_dashboard_grafana - grafana_major_version is no longer ForceNew (#​29212)
  • azurerm_data_factory_linked_service_sftp - add support for SSH authentication and Key Vault secret references (#​28690)
  • azurerm_databricks_workspace - resources using managed resource groups that contain UC can now be deleted with the force_delete Provider Feature flag (#​29095)
  • azurerm_mssql_server - add support for the express_vulnerability_assessment_enabled property (#​29168)
  • azurerm_mysql_flexible_server - deprecate public_network_access_enabled in favor of public_network_access (#​28890)
  • azurerm_netapp_volume - service_level can now be updated (#​29209)
  • azurerm_nginx_deployment - frontend_public, frontend_private, and network_interface are no longer ForceNew (#​28577)
  • azurerm_orchestrated_virtual_machine_scale_set - add support for the upgrade_mode and rolling_upgrade_policy properties (#​28354)
  • azurerm_static_webapp - mark app_settings sensitive in schema (#​28689)

BUG FIXES:

  • azurerm_linux_virtual_machine - license_type can now be updated to None (#​28786)
  • azurerm_mysql_flexible_server - prevent a panic when customer_managed_key is nil (#​29225)
  • azurerm_traffic_manager_nested_endpoint - remove Computed from priority property as these are assigned dynamically by the API (#​29217)

v4.25.0

Compare Source

ENHANCEMENTS:

  • dependencies: go-azure-helpers - update to 0.72.0 (#​29206)
  • dependencies: redisenterprise - update to API version 2024-10-01 (#​29073)
  • dependencies: servicefabricmanaged - update to API version 2024-04-01 (#​29199)
  • Data Source: azurerm_virtual_hub_connection - add support for the static_vnet_propagate_static_routes property (#​28560)
  • azurerm_cosmosdb_account - add support for the DeleteAllItemsByPartitionKey value in the capabilities property (#​29126)
  • azurerm_hdinsight_spark_cluster_resource - add support for the zones property (#​28149)
  • azurerm_linux_function_app - add support for Python version 3.13 (#​29131)
  • azurerm_linux_function_app_slot - add support for Python version 3.13 (#​29131)
  • azurerm_linux_web_app - add support for Python version 3.13 (#​29131)
  • azurerm_linux_web_app_slot - add support for Python version 3.13 (#​29131)
  • azurerm_log_analytics_workspace - add support for the LACluster SKU (#​29137)
  • azurerm_managed_disk - allow disk expansion without downtime for all storage_account_type (#​28730)
  • azurerm_mssql_job_agent - add support for the identity and sku properties (#​29090)
  • azurerm_network_manager - scope_accesses is now optional (#​28781)
  • azurerm_oracle_cloud_vm_cluster - add support for the system_version property (#​29093)
  • azurerm_powerbi_embedded - add support for A7 and A8 values for sku_name (#​29153)
  • azurerm_virtual_hub_connection - add support for the static_vnet_propagate_static_routes property (#​28560)

BUG FIXES

  • Data source: azurerm_container_app_environment - prevent an error when the log analytics workspace is in a different subscription (#​28647)
  • azurerm_kubernetes_cluster_node_pool - fix issue where kubelet_disk_type couldn't be updated, updating this will now rotate the node pool (#​29135)
  • azurerm_linux_virtual_machine - fix issue where a user assigned identity couldn't be removed from the resource (#​29157)
  • azurerm_linux_virtual_machine_scale_set - fix issue where a user assigned identity couldn't be removed from the resource (#​29157)
  • azurerm_log_analytics_workspace - prevent an error when the workspace is in a soft-deleted state and linked to a log analytics cluster (#​29137)
  • azurerm_postgresql_flexible_server_virtual_endpoint - add a lock on the replica server to prevent a race condition (#​29071)
  • azurerm_signalr_service - set location in payload when updating to prevent an API error (#​29184)
  • azurerm_storage_account_queue_properties - prevent a panic when the storage account is removed out of band (#​28371)
  • azurerm_storage_account_static_website - prevent a panic when the storage account is removed out of band (#​28371)
  • azurerm_stream_analytics_job - update validation to notify users if content_storage_policy hasn't been correctly set to setup job_storage_account (#​29158)

v4.24.0

Compare Source

FEATURES:

  • New Resource: azurerm_servicebus_namespace_customer_managed_key (#​28888)
  • New Resource: azurerm_stream_analytics_job_storage_account (#​29113)
  • New Resource: azurerm_web_pubsub_socketio (#​28992)

ENHANCEMENTS:

  • dependencies: hashicorp/go-azure-sdk - update to v0.20250314.1213156 (#​29081)
  • dependencies: loganalytics - partial update to API version 2023-03-01 (#​28977)
  • dependencies: monitor - partial update to API version 2023-03-01 (#​28977)
  • dependencies: postgresql - partial update to API version 2024-08-01 (#​28964)
  • Data Source: azurerm_linux_function_app - add support for the virtual_network_backup_restore_enabled property (#​29012)
  • Data Source: azurerm_linux_web_app - add support for the virtual_network_backup_restore_enabled property (#​29012)
  • Data Source: azurerm_windows_function_app - add support for the virtual_network_backup_restore_enabled property (#​29012)
  • azurerm_ai_services - add support for the network_acls.bypass property (#​28569)
  • azurerm_dashboard_grafana - add support for grafana_major_version 11 (#​28884)
  • azurerm_kubernetes_cluster_node_pool - remove call to retrieve the parent cluster in the read (#​29088)
  • azurerm_linux_function_app - add support for the virtual_network_backup_restore_enabled property (#​29012)
  • azurerm_linux_function_app - set pre_warmed_instance_count on create (#​28739)
  • azurerm_linux_function_app_slot - add support for the virtual_network_backup_restore_enabled property (#​29012)
  • azurerm_linux_web_app - add support for the virtual_network_backup_restore_enabled property (#​29012)
  • azurerm_linux_web_app_slot - add support for the virtual_network_backup_restore_enabled property (#​29012)
  • azurerm_redis_cache - tighten validation for sku_name, family, capacity (#​29079)
  • azurerm_windows_function_app - add support for the virtual_network_backup_restore_enabled property (#​29012)
  • azurerm_windows_function_app - set pre_warmed_instance_count on create (#​28739)
  • azurerm_windows_function_app_slot - add support for the virtual_network_backup_restore_enabled property (#​29012)
  • azurerm_windows_web_app - add support for node version ~22 (#​29082)
  • azurerm_windows_web_app - add support for the virtual_network_backup_restore_enabled property (#​29012)
  • azurerm_windows_web_app_slot - add support for node version ~22 (#​29082)
  • azurerm_windows_web_app_slot - add support for the virtual_network_backup_restore_enabled property (#​29012)

BUG FIXES:

  • azurerm_app_configuration - the encryption block can now be removed (#​28173)
  • azurerm_cdn_frontdoor_origin_group - health_probe no longer resets during update unless specified (#​29094)
  • azurerm_cognitive_account - customer_managed_key can now be removed (#​28368)
  • azurerm_container_group - dns_name_label_reuse_policy is now marked as ForceNew (#​29040)
  • azurerm_disk_encryption_set - prevent crash when retrieving Key Vault details when updating (#​29018)
  • azurerm_express_route_circuit - fix issue where bandwidth_in_mbps isn't updated correctly (#​28822)
  • azurerm_key_vault_secret - revert CustomizeDiff logic to recreate the resource when expiration_date is removed (#​28920)
  • azurerm_kubernetes_cluster - fips_enabled can be updated by cycling the default node pool (#​29096)
  • azurerm_monitor_diagnostic_setting - the enabled_log block can now be removed (#​28485)
  • azurerm_mssql_database - fix validation for auto_pause_delay_in_minutes (#​28670)
  • azurerm_mssql_server - fix an issue where the provider would incorrectly error during plan operations if administrator_login or administrator_login_password were added to lifecycle.ignore_changes (#​29107)

v4.23.0

Compare Source

NOTES:

FEATURES:

  • New Resource: azurerm_network_manager_ipam_pool (#​28695)

ENHANCEMENTS:

  • dependencies: update Go version to 1.24.1 (#​28999)
  • dependencies: hashicorp/go-azure-sdk - update to v0.20250310.1130319 (#​29009)
  • azurerm_cognitive_deployment - add support for DataZoneBatch in the sku.name property (#​28973)
  • azurerm_mongo_cluster - add support for M10, M20, and M200 compute tiers (#​29026)

BUG FIXES:

  • azurerm_linux_function_app - fix validation for site_config.application_stack.node_version to allow 22 (#​28988)
  • azurerm_postgresql_flexible_server - fix validation for customer_managed_key.key_vault_key_id and customer_managed_key.geo_backup_key_id to disallow versionless keys preventing unclear error messages (#​28981)
  • azurerm_web_pubsub_hub - validation for the auth.managed_identity_id now supports token audience as a valid input (#​28495)

v4.22.0

Compare Source

FEATURES:

  • New Data Source: azurerm_extended_location_custom_location (#​28066)
  • New Resource: azurerm_system_center_virtual_machine_manager_virtual_machine_instance (#​27622)

ENHANCEMENTS:

  • dependencies: containers - update API version to 2024-09-01 (#​28598)
  • dependencies: hashicorp/go-azure-sdk - update to v0.20250227.1125644 (#​28902)
  • dependencies: signalr - update API version to 2024-03-01 (#​28940)
  • Data Source: azurerm_container_app - add support for the template.volume.mount_options property (#​28619)
  • Data Source: azurerm_storage_account_queue_properties - now gets the parent account directly rather than searching the list of all accounts when the Resource Manager ID is available (#​28617)
  • Data Source: azurerm_storage_account_static_website - now gets the parent account directly rather than searching the list of all accounts when the Resource Manager ID is available (#​28617)
  • Data Source: azurerm_storage_containers - now gets the parent account directly rather than searching the list of all accounts when the Resource Manager ID is available (#​28617)
  • azurerm_api_connection - display_name and parameter_values are no longer ForceNew (#​28721)
  • azurerm_cdn_frontdoor_firewall_policy - add support for the log_scrubbing properties (#​28834)
  • azurerm_container_app - add support for the template.volume.mount_options property (#​28619)
  • azurerm_container_app_job - add support for the template.volume.mount_options property (#​28619)
  • azurerm_extended_custom_location - deprecated in favour of azurerm_extended_location_custom_location (#​28066)
  • azurerm_mongo_cluster - add support for the connection_strings attribute (#​28880)
  • azurerm_storage_account - now gets the parent account directly rather than searching the list of all accounts when the Resource Manager ID is available (#​28617)
  • azurerm_storage_account_queue_properties - now gets the parent account directly rather than searching the list of all accounts when the Resource Manager ID is available (#​28617)
  • azurerm_storage_account_static_website - now gets the parent account directly rather than searching the list of all accounts when the Resource Manager ID is available (#​28617)
  • azurerm_workloads_sap_discovery_virtual_instance - add support for the managed_resources_network_access_type property (#​28881)
  • azurerm_workloads_sap_single_node_virtual_instance - add support for the managed_resources_network_access_type property (#​28881)
  • azurerm_workloads_sap_three_tier_virtual_instance - add support for the managed_resources_network_access_type property (#​28881)

BUG FIXES:

  • azurerm_api_management_api - split create/update methods (#​28271)
  • azurerm_express_route_circuit - allow_classic_operations is now set when resource is created (#​28748)
  • azurerm_key_vault_certificate - set partial when updating key vault certificate (#​28848)
  • azurerm_managed_disk - always set network_access_policy into state to allow Terraform to detect drift (#​28934)
  • azurerm_mssql_managed_instance - fix an issue that prevented using values only known during apply for administrator_login_password (#​28843)
  • azurerm_mssql_server - prevent panic by removing function call on a value that may be unknown (#​28949)

v4.21.1

Compare Source

BUG FIXES:

  • azurerm_mssql_server - prevent panic by checking if administrator_login exists in the raw config map (#​28909)

v4.21.0

Compare Source

NOTES:

  • The azurerm_mssql_job_credential resource now supports the password_wo write-only argument
  • The azurerm_mssql_server resource now supports the administrator_login_password_wo write-only argument
  • The azurerm_mysql_flexible_server resource now supports the administrator_password_wo write-only argument
  • The azurerm_postgresql_flexible_server resource now supports the administrator_password_wo write-only argument
  • The azurerm_postgresql_server resource now supports the administrator_login_password_wo write-only argument

FEATURES:

  • New Resource: azurerm_linux_function_app_flex_consumption (#​28199)
  • New Resource: azurerm_network_manager_verifier_workspace (#​28754)

ENHANCEMENTS:

  • dependencies: azurerm_kubernetes_cluster_trusted_access_role_binding - update API version to 2024-05-01 (#​28853)
  • dependencies: desktopvirtualization - update API version to 2024-04-03 (#​28771)
  • dependencies: kusto - update API version to 2024-04-13 (#​28685)
  • dependencies: redis - update API version to 2024-11-01 (#​28696)
  • dependencies: workloads - update API version to 2024-09-01 (#​28825)
  • azurerm_fluid_relay_server - fix versionless_id support for key_vault_key_id (#​28864)
  • azurerm_kubernetes_cluster - add support for the upgrade_override_setting property (#​27962)
  • azurerm_kusto_cluster_principal_assignment - add support for AllDatabaseMonitor role type (#​28685)
  • azurerm_linux_function_app - correctly update WEBSITE_CONTENTSHARE and WEBSITE_CONTENTAZUREFILECONNECTIONSTRING when changed in app_settings (#​28859)
  • azurerm_linux_function_app_slot - correctly update WEBSITE_CONTENTSHARE and WEBSITE_CONTENTAZUREFILECONNECTIONSTRING when changed in app_settings (#​28859)
  • azurerm_linux_web_app - add support for Node Version 22 (#​28840)
  • azurerm_linux_web_app_slot - add support for Node Version 22 (#​28840)
  • azurerm_logic_app_standard - add support for the vnet_content_share_enabled property (#​28879)
  • azurerm_mssql_job_credential - add support for the password_wo and password_wo_version properties (#​28808)
  • azurerm_mssql_managed_instance - add support for the database_format and hybrid_secondary_usage properties (#​28248)
  • azurerm_mssql_server - add support for the administrator_login_password_wo and administrator_login_password_wo_version properties (#​28818)
  • azurerm_mysql_flexible_server - add support for the administrator_password_wo and administrator_password_wo_version properties (#​28799)
  • azurerm_postgresql_flexible_server - add support for the administrator_password_wo and administrator_password_wo_version properties (#​28857)
  • azurerm_postgresql_server - add support for the administrator_login_password_wo and administrator_login_password_wo_version properties (#​28856)
  • azurerm_service_plan - add support for the I1mv2, I2mv2, I3mv2, I4mv2, I5mv2 skus (#​28316)
  • azurerm_servicebus_namespace - split create/update functions (#​28539)
  • azurerm_storage_account - nested attributes in immutability_policy can now be updated (#​28122)
  • azurerm_windows_function_app - correctly update WEBSITE_CONTENTSHARE and WEBSITE_CONTENTAZUREFILECONNECTIONSTRING when changed in app_settings (#​28859)
  • azurerm_windows_function_app_slot - correctly update WEBSITE_CONTENTSHARE and WEBSITE_CONTENTAZUREFILECONNECTIONSTRING when changed in app_settings (#​28859)

BUG FIXES:

  • azurerm_key_vault_secret - recreate the resource if expiration_date is removed after having been set (#​28494)
  • azurerm_log_analytics_cluster_customer_managed_key - fix error due to read-only property included in request payload during create/update/delete operations (#​28862)
  • azurerm_log_analytics_cluster_customer_managed_key - remove resource from state when deleted outside of Terraform (#​28862)
  • azurerm_log_analytics_cluster_customer_managed_key - fix resource delete function (#​28862)
  • azurerm_security_center_pricing - updating subplan now recreates the resource to work around API behaviour that enables certain settings on updated (#​27805)
  • azurerm_windows_web_app - fix change detection for tomcat_version (#​28842)

v4.20.0

Compare Source

FEATURES:

  • New Data Source: azurerm_dynatrace_monitor (#​28381)
  • New Resource: azurerm_data_protection_backup_vault_customer_managed_key (#​28679)

ENHANCEMENTS:

  • dependencies: hashicorp/terraform-plugin-sdk/v2 - update to v2.36.0 (#​28788)
  • dependencies: azurerm_data_factory_pipeline - update to use hashicorp/go-azure-sdk (#​28768)
  • Data Source: azurerm_logic_app_standard - add support for the ftp_publish_basic_authentication_enabled and scm_publish_basic_authentication_enabled properties (#​28763)
  • azurerm_logic_app_standard - add support for the ftp_publish_basic_authentication_enabled and scm_publish_basic_authentication_enabled properties (#​28763)
  • azurerm_pim_active_role_assignment - add support for Azure RBAC conditions (#​27947)
  • azurerm_storage_container - add support for migrating from deprecated storage_account_name to storage_account_id (#​28784)
  • azurerm_storage_share - add support for migrating from deprecated storage_account_name to storage_account_id (#​28784)
  • azurerm_storage_table - add attribute resource_manager_id (#​28809)
  • azurerm_windows_function_app - add support for node ~22 (#​28815)
  • azurerm_windows_function_app_slot - add support for node ~22 (#​28815)

BUG FIXES:

  • Data Source: azurerm_container_app - add missing ingress.client_certificate_mode property that caused an error when retrieving data (#​28793)
  • azurerm_data_factory_pipeline - fix error when unmarshaling the headers for a web activity (#​28768)
  • azurerm_mssql_virtual_machine - fix an issue that prevented users from using values only known during apply as the value for auto_backup.encryption_password (#​28223)

v4.19.0

Compare Source

FEATURES:

  • New Data Source: azurerm_stack_hci_storage_path (#​28602)
  • New Resource: azurerm_ai_foundry (#​27424)
  • New Resource: azurerm_ai_foundry_project (#​27424)
  • New Resource: azurerm_mssql_job_step (#​28691)
  • New Resource: azurerm_netapp_volume_group_oracle (#​28391)
  • New Resource: azurerm_virtual_machine_scale_set_standby_pool (#​28441)

ENHANCEMENTS:

  • dependencies: hashicorp/go-azure-sdk update to v0.20250213.1092825 (#​28767)
  • dependencies: sentinel partial update to 2023-12-01-preview (#​28195)
  • Data Source: azurerm_app_configuration - add support for the data_plane_proxy_authentication_mode and data_plane_proxy_private_link_delegation_enabled properties (#​28712)
  • azurerm_app_configuration - add support for the data_plane_proxy_authentication_mode and data_plane_proxy_private_link_delegation_enabled properties (#​28712)
  • azurerm_container_app - add support for the client_certificate_mode property (#​28523)
  • azurerm_cdn_frontdoor_firewall_policy - add support for JSChallenge for custom rules (#​28717)
  • azurerm_express_route_circuit - add support for the rate_limiting_enabled property (#​28659)
  • azurerm_mssql_managed_instance_failover_group - add support for secondary_type (#​28633)
  • azurerm_sentinal_alert_rule_scheduled - increase combined limit of entity_mapping and sentinal_entity_mapping to 10 (#​28195)
  • azurerm_service_plan - support for premium_plan_auto_scale_enabled (#​28524)

BUG FIXES:

  • azurerm_cdn_frontdoor_firewall_policy - fixed issue where the js_challenge_cookie_expiration_in_minutes policies default value caused Standard_AzureFrontDoor skus to receive a BadRequest error (#​28726)
  • azurerm_servicebus_topic - prevent perma diff when provisioning a partitioned topic within a non-partitioned namespace (#​26680)
  • azurerm_linux_function_app - will no longer plan when site_config.0.cors is the default value (#​28703)
  • azurerm_linux_function_app_slot - fix issue where site_config.0.elastic_instance_minimum was not being set (#​28725)
  • azurerm_linux_web_app - will no longer plan when site_config.0.cors is the default value (#​28703)
  • azurerm_postgresql_flexible_server_virtual_endpoint - allow source_server_id and replica_server_id to reference the same server (#​28733)
  • azurerm_windows_function_app - will no longer plan when site_config.0.cors is the default value (#​28703)
  • azurerm_windows_function_app_slot - fix issue where site_config.0.elastic_instance_minimum was not being set (#​28725)
  • azurerm_windows_web_app - will no longer plan when site_config.0.cors is the default value (#​28703)

v4.18.0

Compare Source

ENHANCEMENTS:

  • dependencies: appconfiguration - update to API version 2024-05-01 (#​28700)
  • dependencies: update azurerm_cdn_frontdoor_rule to API version 2024-02-01 (#​28308)
  • dependencies: update azurerm_cdn_frontdoor_ruleset to API version 2024-02-01 (#​28308)
  • dependencies: update go-azure-sdk to v0.20250131.1134653 (#​28674)
  • Data Source: azurerm_cdn_frontdoor_firewall_policy - add support for js_challenge_cookie_expiration_in_minutes policy (#​28284)
  • Data Source: azurerm_nginx_configuration - add support for the protected_file.content_hash property (#​28532)
  • azurerm_cdn_frontdoor_firewall_policy - add support for js_challenge_cookie_expiration_in_minutes policy (#​28284)
  • azurerm_cdn_frontdoor_firewall_policy - add support for JSChallenge action type in the managed_rule override block (#​28308)
  • azurerm_container_app - add support for the volume_mounts.sub_path property (#​27533)
  • azurerm_nginx_configuration - add support for the protected_file.content_hash property (#​28532)
  • azurerm_palo_alto_next_generation_firewall_virtual_hub_local_rulestack - add support for the marketplace_offer_id and plan_id properties (#​28537)
  • azurerm_palo_alto_next_generation_firewall_virtual_hub_panorama - add support for the marketplace_offer_id and plan_id properties (#​28537)
  • azurerm_palo_alto_next_generation_firewall_virtual_network_local_rulestack - add support for the marketplace_offer_id and plan_id properties (#​28537)
  • azurerm_palo_alto_next_generation_firewall_virtual_network_panorama - add support for the marketplace_offer_id and plan_id properties (#​28537)
  • azurerm_route_server - add support for the hub_routing_preference property (#​28363)

BUG FIXES:

  • azurerm_logic_app_action_http - fix issue where queries would be set to an empty map instead of null when omitted from the configuration (#​28447)
  • azurerm_machine_learning_compute_cluster - allow resource creation when node_public_ip_enabled is false and subnet_resource_id has not been specified (#​28673)
  • azurerm_network_watcher_flow_log - prevent panic when removing the traffic_analytics block (#​28416)
  • azurerm_oracle_autonomous_database - fix incorrect type for the supported_regions_to_clone_to property (#​28536)

v4.17.0

Compare Source

FEATURES:

  • New Data Source: azurerm_api_management_subscription (#​27824)
  • New Resource: azurerm_cognitive_account_rai_policy (#​28013)
  • New Resource: azurerm_mssql_job_target_group (#​28492)

ENHANCEMENTS:

  • dependencies: network - update to use 2024-05-01 (#​28146)
  • dependencies: privatedns - update to use 2024-06-01 (#​28599)
  • dependencies: storage - update to use 2023-05-01 (#​27760)
  • Data Source: azure_communication_service - add support for the hostname property (#​28620)
  • azurerm_api_management - capacity now has a max limit of 50 (#​28648)
  • azurerm_backup_protected_vm - add support for feature vm_backup_suspend_protection_and_retain_data_on_destroy (#​27950)
  • azurerm_cognitive_account - support for the bypass property (#​28221)
  • azure_communication_service - add support for the hostname property (#​28620)
  • azurerm_container_app_environment - add support for Azure Monitor as a log destination (#​26047)
  • azurerm_mssql_elasticpool- add support for MOPRMS pool type and update valid

Configuration

📅 Schedule: Branch creation - "after 7am and before 11am every weekday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Nov 8, 2024
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from f8b3ea7 to 1d6a974 Compare November 15, 2024 06:07
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch 3 times, most recently from afa2a52 to 1bfdfb0 Compare November 29, 2024 07:13
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from 1bfdfb0 to 33e8c10 Compare December 6, 2024 08:22
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from 33e8c10 to 03bd7c7 Compare December 13, 2024 09:29
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from 03bd7c7 to 5906bb1 Compare December 20, 2024 11:31
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch 4 times, most recently from fd2505d to 56bdb4a Compare January 10, 2025 12:58
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from 56bdb4a to 58945d8 Compare January 16, 2025 22:56
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch 2 times, most recently from c88af64 to ebafb47 Compare February 7, 2025 10:41
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch 3 times, most recently from 3e9e136 to 2f7c672 Compare February 20, 2025 17:34
@renovate renovate bot changed the title Update Terraform azurerm to v4 Update Terraform azurerm to v4.20.0 Feb 25, 2025
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch 2 times, most recently from 3e84913 to 1e8e031 Compare February 27, 2025 17:53
@renovate renovate bot changed the title Update Terraform azurerm to v4.20.0 Update Terraform azurerm to v4.21.0 Feb 27, 2025
@renovate renovate bot changed the title Update Terraform azurerm to v4.21.0 Update Terraform azurerm to v4.21.1 Feb 28, 2025
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch 2 times, most recently from b44b4a9 to 480f8d1 Compare March 7, 2025 08:59
@renovate renovate bot changed the title Update Terraform azurerm to v4.21.1 Update Terraform azurerm to v4.22.0 Mar 7, 2025
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from 480f8d1 to c6b7f86 Compare March 14, 2025 12:12
@renovate renovate bot changed the title Update Terraform azurerm to v4.22.0 Update Terraform azurerm to v4.23.0 Mar 14, 2025
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from c6b7f86 to d386f46 Compare March 21, 2025 13:30
@renovate renovate bot changed the title Update Terraform azurerm to v4.23.0 Update Terraform azurerm to v4.24.0 Mar 21, 2025
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from d386f46 to e532f4a Compare March 27, 2025 15:44
@renovate renovate bot changed the title Update Terraform azurerm to v4.24.0 Update Terraform azurerm to v4.25.0 Mar 28, 2025
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch 2 times, most recently from a308b5b to 51c97b2 Compare April 3, 2025 16:47
@renovate renovate bot changed the title Update Terraform azurerm to v4.25.0 Update Terraform azurerm to v4.26.0 Apr 4, 2025
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from 51c97b2 to e9d692f Compare April 4, 2025 08:25
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from e9d692f to 725d571 Compare April 11, 2025 09:44
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from 725d571 to 3d772b1 Compare April 25, 2025 11:12
@renovate renovate bot changed the title Update Terraform azurerm to v4.26.0 Update Terraform azurerm to v4.27.0 Apr 25, 2025
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from 3d772b1 to b8cfc7b Compare April 28, 2025 15:13
@hmcts-jenkins-a-to-c
Copy link
Contributor

hmcts-jenkins-a-to-c bot commented Apr 28, 2025

Plan Result (aat)

Plan: 1 to add, 5 to change, 0 to destroy.
  • Create
    • module.postgresql.azurerm_postgresql_flexible_server_active_directory_administrator.pgsql_adadmin
  • Update
    • azurerm_key_vault_secret.flexible_secret_standard_format["DATABASE"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["HOST"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["PASS"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["PORT"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["USER"]
Change Result (Click me)
  # azurerm_key_vault_secret.flexible_secret_standard_format["DATABASE"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-04-28T15:21:05Z" -> (known after apply)
        id                      = "https://bulk-scan-aat.vault.azure.net/secrets/processor-POSTGRES-DATABASE/ff57b9039f9544be979c275eb31b0769"
        name                    = "processor-POSTGRES-DATABASE"
        tags                    = {
            "application"         = "bulk-scan-print"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "staging"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (8 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["HOST"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-04-28T15:21:05Z" -> (known after apply)
        id                      = "https://bulk-scan-aat.vault.azure.net/secrets/processor-POSTGRES-HOST/2dc8dc1977504071bd90e0c4b8a591fe"
        name                    = "processor-POSTGRES-HOST"
        tags                    = {
            "application"         = "bulk-scan-print"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "staging"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (8 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["PASS"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-04-28T15:21:05Z" -> (known after apply)
        id                      = "https://bulk-scan-aat.vault.azure.net/secrets/processor-POSTGRES-PASS/f96764ee7960495181d327706327af90"
        name                    = "processor-POSTGRES-PASS"
        tags                    = {
            "application"         = "bulk-scan-print"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "staging"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (8 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["PORT"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-04-28T15:21:05Z" -> (known after apply)
        id                      = "https://bulk-scan-aat.vault.azure.net/secrets/processor-POSTGRES-PORT/e6b64e0e09e54e39828f8891d838e308"
        name                    = "processor-POSTGRES-PORT"
        tags                    = {
            "application"         = "bulk-scan-print"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "staging"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (8 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["USER"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-04-28T15:21:05Z" -> (known after apply)
        id                      = "https://bulk-scan-aat.vault.azure.net/secrets/processor-POSTGRES-USER/9f01ce8315674da5994d66e4761258b7"
        name                    = "processor-POSTGRES-USER"
        tags                    = {
            "application"         = "bulk-scan-print"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "staging"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (8 unchanged attributes hidden)
    }

  # module.postgresql.azurerm_postgresql_flexible_server_active_directory_administrator.pgsql_adadmin will be created
  + resource "azurerm_postgresql_flexible_server_active_directory_administrator" "pgsql_adadmin" {
      + id                  = (known after apply)
      + object_id           = "e7ea2042-4ced-45dd-8ae3-e051c6551789"
      + principal_name      = "DTS Platform Operations"
      + principal_type      = "Group"
      + resource_group_name = "bulk-scan-processor-flexible-postgres-db-v15-data-aat"
      + server_name         = "bulk-scan-processor-flexible-postgres-db-v15-aat"
      + tenant_id           = "531ff96d-0ae9-462a-8d2d-bec7c0b42082"
    }

Plan: 1 to add, 5 to change, 0 to destroy.

@hmcts-jenkins-a-to-c
Copy link
Contributor

hmcts-jenkins-a-to-c bot commented Apr 28, 2025

Plan Result (prod)

Plan: 1 to add, 5 to change, 0 to destroy.
  • Create
    • module.postgresql.azurerm_postgresql_flexible_server_active_directory_administrator.pgsql_adadmin
  • Update
    • azurerm_key_vault_secret.flexible_secret_standard_format["DATABASE"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["HOST"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["PASS"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["PORT"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["USER"]
Change Result (Click me)
  # azurerm_key_vault_secret.flexible_secret_standard_format["DATABASE"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-04-28T15:24:43Z" -> (known after apply)
        id                      = "https://bulk-scan-prod.vault.azure.net/secrets/processor-POSTGRES-DATABASE/8d2709eb815247cfbd969e34ec1b803b"
        name                    = "processor-POSTGRES-DATABASE"
        tags                    = {
            "application"         = "bulk-scan-print"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "production"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (8 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["HOST"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-04-28T15:24:43Z" -> (known after apply)
        id                      = "https://bulk-scan-prod.vault.azure.net/secrets/processor-POSTGRES-HOST/22b5cad58cd6486ab11e901432abbbc4"
        name                    = "processor-POSTGRES-HOST"
        tags                    = {
            "application"         = "bulk-scan-print"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "production"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (8 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["PASS"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-04-28T15:24:43Z" -> (known after apply)
        id                      = "https://bulk-scan-prod.vault.azure.net/secrets/processor-POSTGRES-PASS/408559177e444d13b97a8dd3a30d1d01"
        name                    = "processor-POSTGRES-PASS"
        tags                    = {
            "application"         = "bulk-scan-print"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "production"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (8 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["PORT"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-04-28T15:24:43Z" -> (known after apply)
        id                      = "https://bulk-scan-prod.vault.azure.net/secrets/processor-POSTGRES-PORT/2cb775893a054a92aee474f5e676c2ef"
        name                    = "processor-POSTGRES-PORT"
        tags                    = {
            "application"         = "bulk-scan-print"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "production"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (8 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["USER"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-04-28T15:24:43Z" -> (known after apply)
        id                      = "https://bulk-scan-prod.vault.azure.net/secrets/processor-POSTGRES-USER/a52d84d0f7ea4178a5c0231ee4c2a71f"
        name                    = "processor-POSTGRES-USER"
        tags                    = {
            "application"         = "bulk-scan-print"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "production"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (8 unchanged attributes hidden)
    }

  # module.postgresql.azurerm_postgresql_flexible_server_active_directory_administrator.pgsql_adadmin will be created
  + resource "azurerm_postgresql_flexible_server_active_directory_administrator" "pgsql_adadmin" {
      + id                  = (known after apply)
      + object_id           = "4d0554dd-fe60-424a-be9c-36636826d927"
      + principal_name      = "DTS Platform Operations SC"
      + principal_type      = "Group"
      + resource_group_name = "bulk-scan-processor-flexible-postgres-db-v15-data-prod"
      + server_name         = "bulk-scan-processor-flexible-postgres-db-v15-prod"
      + tenant_id           = "531ff96d-0ae9-462a-8d2d-bec7c0b42082"
    }

Plan: 1 to add, 5 to change, 0 to destroy.

@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from b8cfc7b to ef58c8c Compare May 9, 2025 13:28
@renovate renovate bot changed the title Update Terraform azurerm to v4.27.0 Update Terraform azurerm to v4.28.0 May 9, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants