v3.113.0

ENHANCEMENTS:

• dependencies: updating to v0.20240715.1100358 of hashicorp/go-azure-sdk (#26638)
• storage - updating to use hashicorp/go-azure-sdk (#26218)

BUG FIXES:

• azurerm_storage_account - fix a validation bug when replacing a StorageV2 account with a StorageV1 account (#26639)
• azurerm_storage_account - resolve an issue refreshing blob or queue properties after recreation (#26218)
• azurerm_storage_account - resolve an issue setting tags for an existing storage account where a policy mandates them (#26218)
• azurerm_storage_account - fix a persistent diff with the customer_managed_key block (#26218)
• azurerm_storage_account - resolve several consistency related issues when crreating a new storage account (#26218)

DEPRECATIONS:

• azurerm_eventhub_namespace - deprecate the zone_redundant field in v4.0 (#26611)
• azurerm_servicebus_namespace - deprecate the zone_redundant field in v4.0 (#26611)

v3.112.0

FEATURES:

• New Data Source: azurerm_elastic_san_volume_snapshot (#26439)
• New Resource: azurerm_dev_center_dev_box_definition (#26307)
• New Resource: azurerm_dev_center_environment_type (#26291)
• New Resource: azurerm_virtual_machine_restore_point (#26526)
• New Resource: azurerm_virtual_machine_restore_point_collection (#26526)

ENHANCEMENTS:

• dependencies: updating to v0.20240710.1114656 of github.com/hashicorp/go-azure-sdk (#26588)
• dependencies: updating to v0.70.0 of go-azure-helpers (#26601)
• containerservice: updating the Fleet resources to use API Version 2024-04-01 (#26588)
• Data Source: azurerm_network_service_tags - extend validation for service to allow AzureFrontDoor.Backend, AzureFrontDoor.Frontend, and AzureFrontDoor.FirstParty (#26429)
• azurerm_api_management_identity_provider_aad - support for the client_library property (#26093)
• azurerm_api_management_identity_provider_aadb2c - support for the client_library property (#26093)
• azurerm_dev_test_virtual_network - support for the shared_public_ip_address property (#26299)
• azurerm_kubernetes_cluster - support for the certificate_authority block under the service_mesh_profile block (#26543)
• azurerm_linux_web_app - support the value 8.3 for the php_version property (#26194)
• azurerm_machine_learning_compute_cluster - the identity property can now be updated (#26404)
• azurerm_web_application_firewall_policy - support for the JSChallenge value for managed_rules.managed_rule_set.rule_group_override.rule_action (#26561)

BUG FIXES:

• Data Source: azurerm_communication_service - primary_connection_string, primary_key, secondary_connection_string and secondary_key are marked as Sensitive (#26560)
• azurerm_app_configuration_feature - fix issue when updating the resource without an existing targeting_filter (#26506)
• azurerm_backup_policy_vm - split create and update function to fix lifecycle - ignore (#26591)
• azurerm_backup_protected_vm - split create and update function to fix lifecycle - ignore (#26583)
• azurerm_communication_service - the primary_connection_string, primary_key, secondary_connection_string, and secondary_key properties are now sensitive (#26560)
• azurerm_mysql_flexible_server_configuration - add locks to prevent conflicts when deleting the resource (#26289)
• azurerm_nginx_deployment - changing the frontend_public.ip_address, frontend_private.ip_address, frontend_private.allocation_method, and frontend_private.subnet_id now creates a new resource (#26298)
• azurerm_palo_alto_local_rulestack_rule - correctl read the protocol property on read when the protocol_ports property is configured (#26510)
• azurerm_servicebus_namespace - parse the identity returned by the API insensitively before setting into state (#26540)

DEPRECATIONS:

• azurerm_servicebus_queue - enable_batched_operations, enable_express and enable_partitioning are superseded by batched_operations_enabled, express_enabled and partitioning_enabled (#26479)
• azurerm_servicebus_subscription - enable_batched_operations has been superseded by batched_operations_enabled (#26479)
• azurerm_servicebus_topic - enable_batched_operations, enable_express and enable_partitioning are superseded by batched_operations_enabled, express_enabled and partitioning_enabled (#26479)

v3.111.0

FEATURES:

• New Resource: azurerm_restore_point_collection (#26518)

ENHANCEMENTS:

• dependencies: updating to v0.20240701.1082110 of github.com/hashicorp/go-azure-sdk (#26502)
• azurerm_disk_encryption_set - support for the managed_hsm_key_id property (#26201)
• azurerm_firewall_policy - remove Computed from the sku property and add a default of Standard in 4.0 (#26499)
• azurerm_kubernetes_cluster - support updating default_node_pool.os_sku between Ubuntu and AzureLinux (#26262)
• azurerm_kubernetes_cluster_node_pool - support updating os_sku between Ubuntu and AzureLinux (#26139)
• azurerm_service_plan - support for new the Flex Consumption plan (#26351)

BUG FIXES:

• azurerm_kubernetes_cluster - prevent a panic (#26478)
• azurerm_kubernetes_cluster - prevent a diff in upgrade_settings when the API returns an empty object (#26541)
• azurerm_kubernetes_cluster_node_pool - prevent a diff in upgrade_settings when the API returns an empty object (#26541)
• azurerm_virtual_network_gateway - split create and update function to fix lifecycle - ignore (#26451)
• azurerm_virtual_network_gateway_connection - split create and update function to fix lifecycle - ignore (#26431)

v3.110.0

FEATURES:

• New Data Source: azurerm_load_test (#26376)
• New Resource: azurerm_virtual_desktop_scaling_plan_host_pool_association (#24670)

ENHANCEMENTS:

• Data Source: azurerm_monitor_data_collection_endpoint - support for the immutable_id property (#26380)
• Data Source: azurerm_nginx_certificate - export the properties sha1_thumbprint, key_vault_secret_version, key_vault_secret_creation_date, error_code and error_message (#26160)
• azurerm_backup_policy_vm - support for the tiering_policy property (#26263)
• azurerm_kubernetes_cluster_node_pool - Pod Disruption Budgets are now respected when deleting a node pool (#26471)
• azurerm_monitor_data_collection_endpoint - support for the immutable_id property (#26380)
• azurerm_mssql_managed_instance - support the value GZRS for the storage_account_type property (#26448)
• azurerm_mssql_managed_instance_transparent_data_encryption - support for the managed_hsm_key_id property (#26496)
• azurerm_redis_cache_access_policy - allow updates to permissions (#26440)
• azurerm_redhat_openshift_cluster - support for the managed_resource_group_name property (#25529)
• azurerm_redhat_openshift_cluster - support for the preconfigured_network_security_group_enabled property (#26082)
• azurerm_iotcentral_application - remove Computed from template and set default of [email protected] in 4.0 (#26485)
• azurerm_digital_twins_time_series_database_connection - remove Computed from kusto_table_name and set a default of AdtPropertyEvents in 4.0 (#26484)

BUG FIXES:

• Data Source: azurerm_express_route_circuit_peering - fix issue where data source attempts to parse an empty string instead of generating the resource ID (#26441)
• azurerm_express_route_gateway - prevent a panic (#26467)
• azurerm_monitor_scheduled_query_rules_alert_v2 - correctly handle the identity block if not specified (#26364)
• azurerm_security_center_automation - prevent resource recreation when tags are updated (#26292)
• azurerm_synapse_workspace - fix issue where azure_devops_repo or github_repo configuration could not be removed (#26421)
• azurerm_virtual_network_dns_servers - split create and update function to fix lifecycle - ignore (#26427)
• azurerm_linux_function_app - set allowed_applications in the request payload (#26462)
• azurerm_linux_function_app_slot - set allowed_applications in the request payload (#26462)
• azurerm_windows_function_app - set allowed_applications in the request payload (#26462)
• azurerm_windows_function_app_slot - set allowed_applications in the request payload (#26462)
• azurerm_linux_web_app - set allowed_applications in the request payload (#26462)
• azurerm_linux_web_app_slot - set allowed_applications in the request payload (#26462)
• azurerm_windows_web_app - set allowed_applications in the request payload (#26462)
• azurerm_windows_web_app_slot - set allowed_applications in the request payload (#26462)
• azurerm_api_management - remove ForceNew from additional_location.zones (#26384)
• azurerm_logic_app_integration_account_schema - the name property now allows underscores (#26475)
• azurerm_palo_alto_local_rulestack_rule - prevent error when switching between protocol and protocol_ports (#26490)

DEPRECATIONS:

• azurerm_analysis_service_server - the property enable_power_bi_service has been superseded by power_bi_service_enabled (#26456)

v3.109.0

FEATURES:

• New Data Source: azurerm_automation_runbook (#26359)
• New Resource: azurerm_data_protection_backup_instance_postgresql_flexible_server (#26249)
• New Resource: azurerm_email_communication_service_domain (#26179)
• New Resource: azurerm_system_center_virtual_machine_manager_cloud (#25429)
• New Resource: azurerm_system_center_virtual_machine_manager_virtual_machine_template (#25449)
• New Resource: azurerm_system_center_virtual_machine_manager_virtual_network (#25451)

ENHANCEMENTS:

• Data Source: azurerm_hdinsight_cluster - export the cluster_id attribute (#26228)
• azurerm_cosmosdb_sql_container - support for the partition_key_kind and partition_key_paths properties (#26372)
• azurerm_data_protection_backup_instance_blob_storage - support for the storage_account_container_names property (#26232)
• azurerm_virtual_network_peering - support for the peer_complete_virtual_networks_enabled, only_ipv6_peering_enabled, local_subnet_names, and remote_subnet_names properties (#26229)
• azurerm_virtual_desktop_host_pool - changing the preferred_app_group_type property no longer creates a new resource (#26333)
• azurerm_maps_account - support for the location, identity, cors and data_store properties (#26397)

BUG FIXES:

• azurerm_automation_job_schedule - updates azurerm_automation_job_schedule to use a composite resource id and allows azurerm_automation_runbook to be updated without causing azurerm_automation_job_schedule to recreate (#22164)
• azurerm_databricks_workspace- correctly allow disabling the default firewall (#26339)
• azurerm_virtual_hub_* - spliting create and update so lifecycle ignore changes works correctly (#26310)

DEPRECATIONS:

• Data Source: azurerm_mariadb_server - deprecated since the service is retiring. Please use azurerm_mysql_flexible_server instead (#26354)
• azurerm_mariadb_configuration - deprecated since the service is retiring. Please use azurerm_mysql_flexible_server_configuration instead (#26354)
• azurerm_mariadb_database - deprecated since the service is retiring. Please use azurerm_mysql_flexible_database instead (#26354)
• azurerm_mariadb_firewall_rule - deprecated since the service is retiring. Please use azurerm_mysql_flexible_server_firewall_rule instead (#26354)
• azurerm_mariadb_server - deprecated since the service is retiring. Please use azurerm_mysql_flexible_server instead (#26354)
• azurerm_mariadb_virtual_network_rule - deprecated since the service is retiring (#26354)

v3.108.0

FEATURES:

• New Data Source: azurerm_role_management_policy (#25900)
• New Resource: azurerm_role_management_policy (#25900)

ENHANCEMENTS:

• provider: support subscription ID hinting when using Azure CLI authentication (#26282)
• serviceconnector: updating to use API Version 2024-04-01 (#26248)
• azurerm_container_groups - can now be created with a User Assigned Identity when running Windows (#26308)
• azurerm_kubernetes_cluster - updating the network_profile.network_policy property to azure and calico when it hasn't been previously set is supported (#26176)
• azurerm_kubernetes_cluster - respect Pod Distruption Budgets when rotating the default_node_pool (#26274)
• azurerm_lb_backend_address_pool - support for the synchronous_mode property (#26309)
• azurerm_private_endpoint - support symultaneous creation of multiple resources of this type per subnet (#26006)

BUG FIXES:

• azurerm_express_route_circuit_peering, azurerm_express_route_circuit, azurerm_express_route_gateway, azurerm_express_route_port - split create and update (#26237)
• azurerm_lb_backend_address_pool_address - when using this resource, values are no longer reset on azurerm_lb_backend_address_pool (#26264)
• azurerm_route_filter - spliting create and update so lifecycle ignore changes works correctly (#26266)
• azurerm_route_server - spliting create and update so lifecycle ignore changes works correctly (#26266)
• azurerm_synapse_workspace - updates the client used in all operations of azurerm_synapse_workspace_sql_aad_admin to prevent this resource from modifying the same resource as azurerm_synapse_workspace_aad_admin (#26317)
• azurerm_virtual_network - correctly parse network securty group IDs (#26283)

DEPRECATIONS:

• Data Source: azurerm_network_interface - the enable_ip_forwarding and enable_accelerated_networking properties have been deprecated and superseded by the ip_forwarding_enabled and accelerated_networking_enabled properties (#26293)
• azurerm_api_management - the policy block has been deprecated is superseded by the azurerm_api_management_policy resource (#26305)
• azurerm_kubernetes_cluster - the ebpf_data_plane property has been deprecated and superseded by the network_data_plane property (#26251)
• azurerm_network_interface - the enable_ip_forwarding and enable_accelerated_networking properties have been deprecated and superseded by the ip_forwarding_enabled and accelerated_networking_enabled properties (#26293)
• azurerm_synapse_workspace - the aad_admin and sql_aad_admin blocks have been deprecated and superseded by the azurerm_synapse_workspace_aad_admin and azurerm_synapse_workspace_sql_aad_admin resources (#26317)

v3.107.0

FEATURES:

• New Resource: azurerm_data_protection_backup_policy_postgresql_flexible_server (#26024)

ENHANCEMENTS:

• dependencies: updating to v0.20240604.1114748 of github.com/hashicorp/go-azure-sdk (#26216)
• advisor: update API version to 2023-01-01 (#26205)
• keyvault: handling the Resources API returning Key Vaults that have been deleted when populating the cache (#26199)
• machinelearning: update API version to 2024-04-01 (#26168)
• network/privatelinkservices - update to use hashicorp/go-azure-sdk (#26212)
• network/serviceendpointpolicies - update to use hashicorp/go-azure-sdk (#26196)
• network/virtualnetworks - update to use hashicorp/go-azure-sdk (#26217)
• network/virtualwans: update route resources to use hashicorp/go-azure-sdk (#26189)
• azurerm_container_app_job - support for the key_vault_secret_id and identity properties in the secret block (#25969)
• azurerm_kubernetes_cluster - support forthe dns_zone_ids popperty in the web_app_routing block (#26117)
• azurerm_notification_hub_authorization_rule - support for the primary_connection_string and secondary_connection_string properties (#26188)
• azurerm_subnet - support for the default_outbound_access_enabled property (#25259)

BUG FIXES:

• azurerm_api_management_named_value - will now enforce setting the secret property when setting the value_from_key_vault property (#26150)
• azurerm_storage_sync_server_endpoint - improve pooling to work around api inconsistencies (#26204)
• azurerm_virtual_network - split create and update function to fix lifecycle - ignore (#26246)
• azurerm_vpn_server_configuration - split create and update function to fix lifecycle - ignore (#26175)
• azurerm_vpn_server_configuration_policy_group - split create and update function to fix lifecycle - ignore (#26207)
• azurerm_vpn_site - split create and update function to fix lifecycle - ignore changes (#26163)

DEPRECATIONS:

• azurerm_kubernetes_cluster - the property dns_zone_id has been superseded by the property dns_zone_ids in the web_app_routing block (#26117)
• azurerm_nginx_deployment - the block configuration has been deprecated and superseded by the resource azurerm_nginx_configuration (#25773)

v3.106.1

BUG FIXES:

• Data Source: azurerm_kubernetes_cluster - fix a crash when reading/setting upgrade_settings (#26173)

v3.106.0

UPGRADE NOTES:

• This release updates the Key Vault cache to load Key Vaults using both the Key Vaults List API and the Resources API to workaround the API returning incomplete/stale data. To achieve this, and provide consistency between tooling, we are intentionally using the same older version of the Resources API as the current version of Azure CLI. (#26070)

FEATURES:

• New Data Source: azurerm_arc_resource_bridge_appliance (#25731)
• New Data Source: azurerm_elastic_san_volume_group (#26111)
• New Data Source: azurerm_storage_queue (#26087)
• New Data Source: azurerm_storage_table (#26126)
• New Resource: azurerm_container_registry_cache_rule (#26034)
• New Resource: azurerm_virtual_machine_implicit_data_disk_from_source (#25537)

ENHANCEMENTS:

• Data Source: azurerm_kubernetes_cluster - add support for the drain_timeout_in_minutes and node_soak_duration_in_minutes properties in the upgrade_settings block (#26137)
• dependencies: updating to v0.20240529.1155048 of github.com/hashicorp/go-azure-sdk (#26148)
• containerapps: update API version to 2024-03-01 (#25993)
• expressroute: update to use hashicorp/go-azure-sdk (#26066)
• keyvault: populating the cache using both the Key Vault List and Resources API to workaround incomplete/stale data being returned (#26070)
• servicenetworking: updating to API Version 2023-11-01 (#26148)
• virtualnetworkpeerings: update to use hashicorp/go-azure-sdk (#26065)
• azurerm_automation_powershell72_module - support for the tags property (#26106)
• azurerm_bastion_host - support for Developer SKU (#26068)
• azurerm_container_app_environment - support for the mutual_tls_enabled property (#25993)
• azurerm_container_registry - validation to fail fast when setting public_network_access_enabled with an invalid SKU (#26054)
• azurerm_key_vault_managed_hardware_security_module - the public_network_access_enabled property can now be updated (#26075)
• azurerm_kubernetes_cluster - support for the cost_analysis_enabled property (#26052)
• azurerm_kubernetes_cluster - support for the drain_timeout_in_minutes and node_soak_duration_in_minutes properties in the upgrade_settings block (#26137)
• azurerm_kubernetes_cluster_node_pool - support for the drain_timeout_in_minutes and node_soak_duration_in_minutes properties in the upgrade_settings block (#26137)
• azurerm_linux_virtual_machine - the hibernation_enabled property can now be updated (#26112)
• azurerm_logic_app_trigger_custom - support for the property callback_url (#25979)
• azurerm_machine_learning_workspace - support for the serverless_compute block (#25660)
• azurerm_mssql_elasticpool - support the sku HS_PRMS (#26161)
• azurerm_new_relic_monitor - support for the identity block (#26115)
• azurerm_route_map - the parameter property is now Optional when the action type is Drop (#26003)
• azurerm_windows_virtual_machine - the hibernation_enabled property can now be updated (#26112)

BUG FIXES:

• Data Source: azurerm_system_center_virtual_machine_manager_inventory_items - normalise the resource ID for Intentory Items (#25955)
• azurerm_app_configuration_feature - update polling interval to tolerate eventual consistency of the API (#26025)
• azurerm_app_configuration_key - update polling interval to tolerate eventual consistency of the API (#26025)
• azurerm_eventhub_namespace_customer_managed_key - validating that the User Assigned Identity used for accessing the Key Vault is assigned to the EventHub Namespace (#28509)
• azurerm_linux_function_app - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#26107)
• azurerm_linux_function_app_slot - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#26107)
• azurerm_linux_web_app - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#26107)
• azurerm_linux_web_app_slot - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#26107)
• azurerm_postgresql_flexible_server - prevent premature check on updated storage_mb value that prevents the resource from being re-created (#25986)
• azurerm_redis_access_cache_policy_assignment - add locks to stabilize creation of multiple policy assignments (#26085)
• azurerm_redis_access_cache_policy - add locks to stabilize creation of multiple policy assignments (#26085)
• azurerm_windows_function_app - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#26107)
• azurerm_windows_function_app_slot - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#26107)
• azurerm_windows_web_app - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#26107)
• azurerm_windows_web_app_slot - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#26107)

v3.105.0

BREAKING CHANGE:

• azurerm_kubernetes_cluster - the properties workload_autoscaler_profile.vertical_pod_autoscaler_update_mode and workload_autoscaler_profile.vertical_pod_autoscaler_controlled_values are no longer populated since they're not exported in API version 2023-09-02-preview (#25663)

FEATURES:

• New Resource: azurerm_api_management_policy_fragment (#24968)

ENHANCEMENTS:

• dependencies: updating to v0.20240522.1080424 of github.com/hashicorp/go-azure-sdk (#26069)
• containerservice: updating to use API Version 2023-09-02-preview (#25663)
• azurerm_application_insights_standard_web_test - http_verb can now be set to HEAD and OPTIONS (#26077)
• azurerm_cdn_frontdoor_rule - updating the validation for match_values within the uri_path_condition block to support a forward-slash (#26017)
• azurerm_linux_web_app - normalising the value for virtual_network_subnet_id (#25885)
• azurerm_machine_learning_compute_cluster - add validation for name (#26060)
• azurerm_machine_learning_compute_cluster - improve validation to allow an empty subnet_resource_id when the Workspace is using a managed Virtual Network (#26073)
• azurerm_postgresql_flexible_server - the field public_network_access_enabled is now configurable (previously this was computed-only/not settable via the API) (#25812)
• azurerm_snapshot - support for disk_access_id (#25996)
• azurerm_windows_web_app - normalising the value for virtual_network_subnet_id (#25885)

BUG FIXES:

• azurerm_container_app_environment_custom_domain: parsing the Log Analytics Workspace ID insensitively to workaround the API returning this inconsistently (#26074)
• azurerm_container_app_job - updating the validation for the name field (#26049)
• azurerm_container_app_job - updating the validation for the name field within the custom_scale_rule block (#26049)
• azurerm_container_app_job - updating the validation for the name field within the rules block (#26049)
• azurerm_linux_function_app_slot - fixed panic when planning from a version older than 3.88.0 (#25838)
• azurerm_pim_active_role_assignment - fix a persistent diff when ticket is not specified (#26059)
• azurerm_pim_eligible_role_assignment - fix a persistent diff when ticket is not specified (#26059)
• azurerm_policy_definition - recreate the resource if the parameters property is updated to include fewer items (#26083)
• azurerm_windows_function_app_slot - set Server Farm ID in payload when using a Virtual Network Subnet for the slot (#25634)
• azurerm_windows_web_app_slot - set Server Farm ID in payload when using a Virtual Network Subnet for the slot (#25634)