Update Terraform azurerm to v4

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
azurerm (source)	required_provider	major	~> 3.116.0 -> ~> 4.10.0

---

Release Notes

hashicorp/terraform-provider-azurerm (azurerm)

v4.10.0

Compare Source

BREAKING CHANGES:

• dependencies - update cognitive to 2024-10-01, due to a behavioural change in this version of the API, the primary_access_key and secondary_access_key can not be retrieved if local_authentication_enabled has been set to false. These properties that may have had values previously will now be empty. This has affected the azurerm_ai_services and azurerm_cognitive_account resources as well as the azurerm_cognitive_account data source (#​27851)

FEATURES:

• New Data Source: azurerm_key_vault_managed_hardware_security_module_key (#​27827)
• New Resource: azurerm_netapp_backup_vault (#​27188)
• New Resource: azurerm_netapp_backup_policy (#​27188)

ENHANCEMENTS:

• dependencies: update terraform-plugin-framework to version v1.13.0 (#​27936)
• dependencies: update terraform-plugin-framework-validators to version v0.14.0 (#​27936)
• dependencies: update terraform-plugin-go to version v0.25.0 (#​27936)
• dependencies: update terraform-plugin-mux to version v0.17.0 (#​27936)
• dependencies: update terraform-plugin-sdk/v2 to version v2.35.0 (#​27936)
• Data Source: azurerm_bastion_host - add support for the zones property (#​27909)
• azurerm_application_gateway - support more values for the status_code property (#​27535)
• azurerm_bastion_host - support for the zones property (#​27909)
• azurerm_communication_service - support for usgov region (#​27919)
• azurerm_email_communication_service - support for usgov region added (#​27919)
• azurerm_linux_function_app - support for .NET 9 (#​27879)
• azurerm_linux_function_app_slot - support for .NET 9 (#​27879)
• azurerm_linux_web_app - support for .NET 9 (#​27879)
• azurerm_linux_web_app_slot - support for .NET 9 (#​27879)
• azurerm_windows_web_app - support for .NET 9 (#​27879)
• azurerm_windows_web_app_slot - support for .NET 9 (#​27879)
• azurerm_windows_function_app - support for .NET 9 (#​27879)
• azurerm_windows_function_app_slot - support for .NET 9 (#​27879)

BUG FIXES:

• azurerm_log_analytics_workspace_table - use the subscription from workspace ID (#​27590)
• azurerm_traffic_manager_external_endpoint - the value for priority will be dynamically assigned by the API (#​27966)
• azurerm_traffic_manager_azure_endpoint - the value for priority will be dynamically assigned by the API (#​27966)

v4.9.0

Compare Source

FEATURES:

• New Resource: azurerm_dynatrace_monitor (#​27432)
• New Resource: azurerm_dashboard_grafana_managed_private_endpoint (#​27781)
• New Resource: azurerm_data_protection_backup_instance_mysql_flexible_server (#​27464)
• New Resource: azurerm_mongo_cluster (#​27636)
• New Resource: azurerm_stack_hci_network_interface (#​26888)

ENHANCEMENTS:

• dependencies - update go-azure-sdk to v0.20241104.1140654 (#​27896)
• dependencies - update go-azure-helpers to v0.71.0 (#​27897)
• dependencies - update golang-jwt to v4.5.1 (#​27938)
• storage - allow azurerm_storage_account to be used in Data Plane restrictive environments (#​27818)
• azurerm_cognitive_deployment - sku.0.name now supports DataZoneStandard (#​27926)
• azurerm_mssql_managed_database - support for the tags property (#​27857)
• azurerm_oracle_cloud_vm_cluster - support for the domain, scan_listener_port_tcp, scan_listener_port_tcp_ssl and zone_id properties (#​27808)
• azurerm_public_ip_prefix - support for the sku_tier property (#​27882)
• azurerm_public_ip - support for the domain_name_label_scope property (#​27748)
• azurerm_subnet - default_outbound_access_enabled can now be updated (#​27858)
• azurerm_storage_container - support for the storage_account_id property (#​27733)
• azurerm_storage_share - support for the storage_account_id property (#​27733)

v4.8.0

Compare Source

FEATURES:

• New Data Source: azurerm_virtual_network_peering (#​27530)
• New Resource: azurerm_machine_learning_workspace_network_outbound_rule_fqdn (#​27384)
• New Resource: azurerm_stack_hci_extension (#​26929)
• New Resource: azurerm_stack_hci_marketplace_gallery_image (#​27532)
• New Resource: azurerm_trusted_signing_account (#​27720)

ENHANCEMENTS:

• mysql - upgrade api version to 2023-12-30 (#​27767)
• network - upgrade api version to 2024-03-01 (#​27746)
• azurerm_cosmosdb_account: support for CMK through managed_hsm_key_id property (#​26521)
• azurerm_cosmosdb_account - support further versions for mongo_server_version (#​27763)
• azurerm_container_app_environment - changing the log_analytics_workspace_id property no longer creates a new resource (#​27794)
• azurerm_data_factory_linked_service_azure_sql_database - add support for the credential_name property (#​27629)
• azurerm_key_vault_key - expiration_date only recreates the resource when it is removed from the config file (#​27813)
• azurerm_kubernetes_cluster - fix issue wheremaintenance_window_auto_upgrade/maintenance_window_auto_upgrade/maintenance_window_node_os might not be read into state (#​26915)
• azurerm_kubernetes_cluster - support for the backend_pool_type property (#​27596)
• azurerm_kubernetes_cluster - support for the daemonset_eviction_for_empty_nodes_enabled, daemonset_eviction_for_occupied_nodes_enabled, and ignore_daemonsets_utilization_enabled properties (#​27588)
• azurerm_load_test - description can now be updated (#​27800)
• azurerm_oracle_cloud_vm_cluster - export the ocid property (#​27785)
• azurerm_orchestrated_virtual_machine_scale_set - add support for sku_profile block (#​27599)
• azurerm_web_application_firewall_policy - add support for policy_settings.0.file_upload_enforcement (#​27774)

BUG FIXES:

• azurerm_automation_hybrid_runbook_worker_group - correctly mark resource as gone if it's absent when reading it (#​27797)
• azurerm_automation_hybrid_runbook_worker - correctly mark resource as gone if it's absent when reading it (#​27797)
• azurerm_automation_python3_package - correctly mark resource as gone if it's absent when reading it (#​27797)
• azurerm_data_protection_backup_vault - prevent panic when checking value of cross_region_restore_enabled (#​27762)
• azurerm_role_management_policy - fix panic when unmarshalling the policy into a specific type (#​27731)
• azurerm_security_center_subscription_pricing - correctly type assert the additional_extension_properties property when building the payload (#​27721)
• azurerm_synapse_workspace_aad_admin - will no correctly delete when using azurerm_synapse_workspace_aad_admin with azurerm_synapse_workspace (#​27606)
• azurerm_windows_function_app_slot - fixed panic in state migration (#​27700)

v4.7.0

Compare Source

FEATURES:

• New Data Source: azurerm_oracle_adbs_character_sets (#​27698)
• New Data Source: azurerm_oracle_adbs_national_character_sets (#​27698)
• New Data Source: azurerm_oracle_autonomous_database (#​27696)
• New Data Source: azurerm_oracle_db_nodes (#​27698)
• New Data Source: azurerm_oracle_db_system_shapes (#​27698)
• New Data Source: azurerm_oracle_gi_versions (#​27698)
• New Resource: azurerm_dev_center_project_pool (#​27706)
• New Resource: azurerm_oracle_autonomous_database (#​27696)
• New Resource: azurerm_video_indexer_account (#​27632)

ENHANCEMENTS:

• dependencies - update go-azure-sdk to v0.20241021.1074254 (#​27713)
• newrelic - upgrade api version to 2024-03-01 (#​27135)
• cosmosdb - upgrade api version to 2024-08-15 (#​27659)
• azurerm_application_gateway - support for the new Basic SKU value (#​27440)
• azurerm_consumption_budget_management_group - the property notification.threshold_type can now be updated (#​27511)
• azurerm_consumption_budget_resource_group - the property notification.threshold_type can now be updated (#​27511)
• azurerm_container_app - add support for the template.container.readiness_probe.initial_delay and template.container.startup_probe.initial_delay properties (#​27551)
• azurerm_mssql_managed_instance - the storage_account_type property can now be updated (#​27737)

BUG FIXES:

• azurerm_automation_software_update_configuration - correct validation to not allow 5 and allow -1 (#​25574)
• azurerm_cosmosdb_sql_container - fix recreation logic for partition_key_version (#​27692)
• azurerm_mssql_database - updating short term retention policy now works as expected (#​27714)
• azurerm_network_watcher_flow_log - fix issue where tags were not being updated (#​27389)
• azurerm_postgresql_flexible_server_virtual_endpoint - retrieve and parse replica_server_id for cross-region scenarios as well as remove custom poller for the delete operation (#​27509)

v4.6.0

Compare Source

FEATURES:

• New Resource: azurerm_dev_center_attached_network (#​27638)
• New Resource: azurerm_oracle_cloud_vm_cluster (#​27678)
• New Resource: azurerm_oracle_exadata_infrastructure (#​27678)
• New Data Source: azurerm_oracle_cloud_vm_cluster (#​27678)
• New Data Source: azurerm_oracle_db_servers (#​27678)
• New Data Source: azurerm_oracle_exadata_infrastructure (#​27678)

ENHANCEMENTS:

• redisenterprise - upgrade api version to 2024-06-01-preview (#​27597)
• azurerm_app_configuration - support for premium sku (#​27674)
• azurerm_container_app - support for the max_inactive_revisions property (#​27598)
• azurerm_kubernetes_cluster - remove lock on subnets (#​27583)
• azurerm_nginx_deployment - allow updates for sku (#​27604)
• azurerm_fluid_relay_server - support for the customer_managed_key property (#​27581)
• azurerm_linux_virtual_machine - support the UBUNTU_PRO value for the license_type property (#​27534)

BUGS:

• azurerm_api_management_api_diagnostic - do not set OperationNameFormat when the identifier property is azuremonitor (#​27456)
• azurerm_api_management - prevent a panic (#​27649)
• azurerm_mssql_database - make short_term_retention_policy.backup_interval_in_hours computed (#​27656)

v4.5.0

Compare Source

FEATURES:

• New Resource: azurerm_stack_hci_virtual_hard_disk (#​27474)

ENHANCEMENTS:

• azurerm_bastion_host - support for the Premium SKU and session_recording_enabled property (#​27278)
• azurerm_log_analytics_cluster - the size_gb property now supports all of 100, 200, 300, 400, 500, 1000, 2000, 5000, 10000, 25000, and 50000 (#​27616)
• azurerm_mssql_elasticpool - allow PRMS for the family property (#​27615)

BUG FIXES:

• azurerm_mssql_database - now creates successfully when elastic pool is hyperscale (#​27505)
• azurerm_postgresql_flexible_server_configuration - now locks to prevent conflicts when deploying multiple (#​27355)

v4.4.0

Compare Source

ENHANCEMENTS:

• dependencies - update github.com/hashicorp/go-azure-sdk to v0.20240923.1151247 (#​27491)
• azurerm_site_recovery_replicated_vm - support for the target_virtual_machine_size property (#​27480)

BUG FIXES:

• azurerm_app_service_certificate - key_vault_secret_id can now be versionless (#​27537)
• azurerm_linux_virtual_machine_scale_set - prevent crash when auto_upgrade_minor_version_enabled is nil (#​27353)
• azurerm_role_assignment - correctly parse ID when it's a root or provider scope (#​27237)
• azurerm_storage_blob - source_content is now ForceNew (#​27508)
• azurerm_virtual_network_gateway_connection - revert shared_key to Optional and Computed (#​27560)

v4.3.0

Compare Source

FEATURES:

• New Resource: azurerm_advisor_suppression (#​26177)
• New Resource: azurerm_data_protection_backup_policy_mysql_flexible_server (#​26955)
• New Resource: azurerm_key_vault_managed_hardware_security_module_key_rotation_policy (#​27306)
• New Resource: azurerm_stack_hci_deployment_setting (#​25646)
• New Resource: azurerm_stack_hci_storage_path (#​26509)
• New Data Source: azurerm_vpn_server_configuration (#​27054)

ENHANCEMENTS:

• managementgroups - migrate to hashicorp/go-azure-sdk (#​26430)
• nginx - upgrade api version to 2024-06-01-preview (#​27345)
• azurerm_linux[windows]_web[function]_app[app_slot] - upgrade api version from 2023-01-01 to 2023-12-01 (#​27196)
• azurerm_cosmosdb_account - support for the capability EnableNoSQLVectorSearch (#​27357)azurerm_container_app_custom_domain - fix parsing the certificate ID error #​25972
• azurerm_container_app_custom_domain - support other certificate types (#​25972)
• azurerm_linux_virtual_machine_scale_set - the zones property can now be updated without creating a new resource (#​27288)
• azurerm_orchestrated_virtual_machine_scale_set - the zones property can now be updated without creating a new resource (#​27288)
• azurerm_role_management_policy - support for resource scope (#​27205)
• azurerm_spring_cloud_gateway - changing the environment_variables and sensitive_environment_variables properties no longer creates a new resource (#​27404)
• azurerm_static_web_app - support for the public_network_access_enabled property (#​26345)
• azurerm_shared_image - support for the disk_controller_type_nvme_enabled property (#​26370)
• azurerm_storage_blob - changing the source property no longer creates a new resource (#​27394)
• azurerm_storage_object_replication - changing the rules.x. source_container_name and rules.x. destination_container_name properties no longer creates a new resource (#​27394)
• azurerm_windows_virtual_machine_scale_set - the zones property can now be updated without creating a new resource (#​27288)

BUG FIXES:

• azurerm_application_insights - fix crash when read for DataVolumeCap is nil (#​27352)
• azurerm_container_app - relax validation on the ingress traffic property (#​27396)
• azurerm_log_analytics_workspace_table - will now correctly set total_retention_in_days when sku is Basic (#​27420)

v4.2.0

Compare Source

FEATURES:

• New Resource: azurerm_arc_machine (#​26647)
• New Resource: azurerm_arc_machine_automanage_configuration_assignment (#​26657)

ENHANCEMENTS:

• network/bastionhosts - upgrade api version from 2023-11-01 to 2024-01-01 (#​27277)
• recoveryservices - upgrade recoveryservicessiterecovery from 2022-10-01 to 2024-04-01 (#​27281)
• azurerm_data_protection_backup_vault - support for the property cross_region_restore_enabled property (#​27197)
• azurem_mssql_managed_instance - support for the service_principal_type property (#​27240)

BUG FIXES:

• azurerm_cosmosdb_account - fix crash during state migration (#​27302)
• azurerm_servicebus_queue - fix defaults of the default_message_ttl and auto_delete_on_idle properties (#​27305)

v4.1.0

Compare Source

ENHANCEMENTS:

• dependencies - bump hashicorp/go-azure-sdk to v0.20240903.1111904 (#​27268)
• Virtual Machine Scale Sets - upgrade api version from 2024-03-01 to 2024-07-01 (#​27230)
• hdinsights - update the HDInsights Node definition validation of VM sizes to include new V5 types (#​27270)
• azurerm_api_management_logger - support for the application_insights.connection_string property (#​27137)
• azurerm_bot_service_azure_bot - will now send the value for the developer_app_insights_api_key property (#​27280)
• azurerm_netapp_volume - support for the smb3_protocol_encryption_enabled property (#​27228)
• azurerm_subnet - support Microsoft.DevOpsInfrastructure as delegation service (#​27259)

BUG FIXES:

• azurerm_mysql_flexible_server - correctly set source_server_id in the state file (#​27295)
• azurerm_cosmosdb_account - the ip_range_filter property now supports IPV4 addresses (#​27208)
• azurerm_cosmosdb_account - added state migration for ip_range_filter underlying type change from string to set (#​27276)
• azurerm_linux_virtual_machine - the admin_ssh_key.public_key property now supports ed25519 ssh keys (#​27202)
• azurerm_sentinel_automation_rule - no longer panics when using condition_json (#​27269)
• azurerm_kubernetes_cluster - the host_encryption_enabled and node_public_ip_enabled properties are now set correctly (#​27218)

v4.0.1

Compare Source

BUG FIXES:

• provider: fix a validation bug that prevents terraform validate from working when subscription_id is not specified (#​27178)
• azurerm_cognitive_deployment - fixed replacement of scale block with sku (#​27173)
• azurerm_kubernetes_cluster - prevent a panic (#​27183)
• azurerm_kubernetes_cluster_node_pool - prevent a panic caused by renamed enable_* properties (#​27164)
• azurerm_sentinel_data_connector_microsoft_threat_intelligence - prevent error by removing deprecated property bing_safety_phishing_url_lookback_date (#​27171)

v4.0.0

Compare Source

NOTES:

• Major Version: Version 4.0 of the Azure Provider is a major version - some behaviours have changed and some deprecated fields/resources have been removed - please refer to the 4.0 upgrade guide for more information.
• When upgrading to v4.0 of the AzureRM Provider, we recommend upgrading to the latest version of Terraform Core (which can be found here).

ENHANCEMENTS:

• Data Source: azurerm_shared_image - add support for the trusted_launch_supported, trusted_launch_enabled, confidential_vm_supported, confidential_vm_enabled, accelerated_network_support_enabled and hibernation_enabled properties (#​26975)
• dependencies: updating hashicorp/go-azure-sdk to v0.20240819.1075239 (#​27107)
• applicationgateways - updating to use 2023-11-01 (#​26776)
• containerregistry - updating to use 2023-06-01-preview (#​23393)
• containerservice - updating to 2024-05-01 (#​27105)
• mssql - updating to use hashicorp/go-azure-sdk and 023-08-01-preview (#​27073)
• mssqlmanagedinstance - updating to use hashicorp/go-azure-sdk and 2023-08-01-preview (#​26872)
• azurerm_image - add support for the disk_encryption_set_id property to the data_disk block (#​27015)
• azurerm_log_analytics_workspace_table - add support for more total_retention_in_days and retention_in_days values (#​27053)
• azurerm_mssql_elasticpool - add support for the HS_MOPRMS and MOPRMS skus (#​27085)
• azurerm_netapp_pool - allow 1 as a valid value for size_in_tb (#​27095)
• azurerm_notification_hub - add support for the browser_credential property (#​27058)
• azurerm_redis_cache - add support for the access_keys_authentication_enabled property (#​27039)
• azurerm_role_assignment - add support for the /, /providers/Microsoft.Capacity and /providers/Microsoft.BillingBenefits scopes (#​26663)
• azurerm_shared_image - add support for the hibernation_enabled property (#​26975)
• azurerm_storage_account - support queue_encryption_key_type and table_encryption_key_type for more storage account kinds (#​27112)
• azurerm_web_application_firewall_policy - add support for the request_body_enforcement property (#​27094)

BUG FIXES:

• azurerm_ip_group_cidr - fixed the position of the CIDR check to correctly refresh the resource when it's no longer present (#​27103)
• azurerm_monitor_diagnostic_setting - add further polling to work around an eventual consistency issue when creating the resource (#​27088)
• azurerm_storage_account - prevent API error by populating infrastructure_encryption_enabled when updating customer_managed_key (#​26971)
• azurerm_storage_blob_inventory_policy - the filter property can now be set when scope is container (#​27113)
• azurerm_virtual_network_dns_servers - moved locks to prevent the creation of subnets with stale data (#​27036)
• azurerm_virtual_network_gateway_connection - allow 0 as a valid value for ipsec_policy.sa_datasize (#​27056)

---

For information on changes between the v3.116.0 and v3.0.0 releases, please see the previous v3.x changelog entries.

For information on changes between the v2.99.0 and v2.0.0 releases, please see the previous v2.x changelog entries.

For information on changes between the v1.44.0 and v1.0.0 releases, please see the previous v1.x changelog entries.

For information on changes prior to the v1.0.0 release, please see the v0.x changelog.

v3.117.0

Compare Source

SPECIAL NOTES: This 3.x release is a special, one-off, back-port of functionality for azurerm_storage_account to enable users to deploy this resource in environments which block / are restrictive of Data Plane access, thus preventing the resource being created and/or managed. This functionality is back-ported from the v4.9.0 release. Users migrating from this release to the 4.x line, should upgrade directly to v4.9.0 or later, as these features are not compatible with earlier releases of 4.x.

FEATURES:

• New Resource: azurerm_storage_account_queue_properties (#​27819)
• New Resource: azurerm_storage_account_static_website (#​27819)
• New Provider Feature - storage data_plane_available feature flag (#​27819)

ENHANCEMENTS:

• azurerm_storage_account - can now be created and managed if Data Plane endpoints are blocked by a firewall (#​27819)

---

Configuration

📅 Schedule: Branch creation - "after 7am and before 11am every weekday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

CCD diff report

No change