v4.15.0

ENHANCEMENTS:

• resource/cloudflare_access_identity_provider: Support email_claim_name, Okta authorization_server_id, and pingone (#2765)
• resource/cloudflare_ruleset: Add support for a new Browser Mode that allows bypass of downstream caches (#2756)
• resource/cloudflare_ruleset: Add support for the use of Origin Cache Control in the Rulesets API (#2753)
• resource/cloudflare_ruleset: Add support for the use of Proxy Read Timeout field in Rulesets API (#2755)

BUG FIXES:

• resource/cloudflare_list: Fix import for cloudflare_list resource (#2663)
• resource/cloudflare_record: Updates the cast to a pointer to match changes in the SDK (#2763)
• resource/pages_project: force replace when changing pages source (#2750)

DEPENDENCIES:

• provider: bumps crazy-max/ghaction-import-gpg from 5 to 6 (#2758)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.39 to 1.18.40 (#2775)
• provider: bumps github.com/cloudflare/cloudflare-go from 0.76.0 to 0.77.0 (#2761)
• provider: bumps github.com/hashicorp/terraform-plugin-framework from 1.3.5 to 1.4.0 (#2745)
• provider: bumps github.com/hashicorp/terraform-plugin-mux from 0.11.2 to 0.12.0 (#2746)
• provider: bumps github.com/hashicorp/terraform-plugin-sdk/v2 from 2.28.0 to 2.29.0 (#2748)
• provider: bumps goreleaser/goreleaser-action from 4.6.0 to 5.0.0 (#2757)

v4.14.0

FEATURES:

• New Resource: cloudflare_web_analytics_rule (#2686)
• New Resource: cloudflare_web_analytics_site (#2686)

ENHANCEMENTS:

• resource/cloudflare_access_application: Add custom_non_identity_deny_url field (#2721)
• resource/cloudflare_access_group: Improve documentation for access_group usage (#2718)
• resource/cloudflare_load_balancer_monitor: add support for consecutive_up and consecutive_down (#2723)
• resource/cloudflare_total_tls: add support for importing existing resources (#2734)

BUG FIXES:

• resource/cloudflare_access_identity_provider: Fix access IDPs not importing config obj (#2735)

DEPENDENCIES:

• provider: bumps actions/checkout from 3 to 4 (#2736)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.36 to 1.18.37 (#2714)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.37 to 1.18.38 (#2731)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.38 to 1.18.39 (#2741)
• provider: bumps github.com/aws/aws-sdk-go-v2/credentials from 1.13.35 to 1.13.36 (#2732)
• provider: bumps github.com/aws/aws-sdk-go-v2/credentials from 1.13.36 to 1.13.37 (#2740)
• provider: bumps github.com/cloudflare/cloudflare-go from 0.75.0 to 0.76.0 (#2726)
• provider: bumps github.com/hashicorp/terraform-plugin-framework-validators from 0.11.0 to 0.12.0 (#2727)
• provider: bumps github.com/hashicorp/terraform-plugin-sdk/v2 from 2.27.0 to 2.28.0 (#2719)
• provider: bumps github.com/hashicorp/terraform-plugin-testing from 1.4.0 to 1.5.1 (#2730)
• provider: bumps golang.org/x/net from 0.14.0 to 0.15.0 (#2739)
• provider: bumps goreleaser/goreleaser-action from 4.4.0 to 4.6.0 (#2742)

v4.13.0

FEATURES:

• New Data Source: cloudflare_user (#2691)
• New Resource: cloudflare_bot_management (#2672)
• New Resource: cloudflare_hostname_tls_setting (#2700)
• New Resource: cloudflare_hostname_tls_setting_ciphers (#2700)
• New Resource: cloudflare_zone_hold (#2671)

ENHANCEMENTS:

• datasource/api_token_permission_groups: Add R2 scopes (#2687)
• datasource/api_token_permission_groups: Convert to plugin framework (#2687)
• resource/cloudflare_access_application: adds support for custom saml attributes in saas access apps (#2676)
• resource/cloudflare_access_group: add support for AccessGroupAzureAuthContext (#2654)
• resource/cloudflare_access_identity_provider: add conditional_access_enabled attr (#2654)
• resource/cloudflare_access_service_token: add support for managing Duration (#2647)
• resource/cloudflare_device_posture_integration: update support for managing tanium_s2s third party posture provider. (#2674)
• resource/cloudflare_device_posture_rule: update support for new fields for tanium_s2s posture rule. (#2674)
• resource/cloudflare_notification_policy: Add possibility to configure Pages Alerts. (#2694)
• resource/cloudflare_waiting_room: Add queueing_status_code to the Waiting Room resource (#2666)
• resource/cloudflare_worker_domain: add support for Import operations (#2679)

BUG FIXES:

• resource/cloudflare_access_group: Fix issue where saml rules would not read the IDP id from the API (#2683)
• resource/cloudflare_rulest: allow configuring an origin Port value without the Host (and vice versa) (#2677)

DEPENDENCIES:

• provider: bumps github.com/aws/aws-sdk-go-v2 from 1.20.1 to 1.20.2 (#2695)
• provider: bumps github.com/aws/aws-sdk-go-v2 from 1.20.3 to 1.21.0 (#2710)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.33 to 1.18.34 (#2697)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.34 to 1.18.35 (#2706)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.35 to 1.18.36 (#2708)
• provider: bumps github.com/aws/aws-sdk-go-v2/credentials from 1.13.32 to 1.13.33 (#2696)
• provider: bumps github.com/aws/aws-sdk-go-v2/credentials from 1.13.33 to 1.13.34 (#2703)
• provider: bumps github.com/aws/aws-sdk-go-v2/credentials from 1.13.34 to 1.13.35 (#2709)
• provider: bumps github.com/aws/aws-sdk-go-v2/service/s3 from 1.38.2 to 1.38.3 (#2698)
• provider: bumps github.com/aws/aws-sdk-go-v2/service/s3 from 1.38.3 to 1.38.4 (#2705)
• provider: bumps github.com/aws/aws-sdk-go-v2/service/s3 from 1.38.4 to 1.38.5 (#2707)
• provider: bumps github.com/cloudflare/cloudflare-go from 0.74.0 to 0.75.0 (#2685)
• provider: bumps github.com/google/uuid from 1.3.0 to 1.3.1 (#2711)
• provider: bumps github.com/hashicorp/terraform-plugin-framework from 1.3.4 to 1.3.5 (#2699)
• provider: bumps goreleaser/goreleaser-action from 4.3.0 to 4.4.0 (#2675)

v4.12.0

BREAKING CHANGES:

• resource/cloudflare_ruleset: remove shareable_entitlement_name per the Go library changes since it hasn't ever been controllable by users (#2652)

FEATURES:

• New Data Source: cloudflare_zone_cache_reserve (#2642)
• New Resource: cloudflare_access_custom_page (#2643)
• New Resource: cloudflare_zone_cache_reserve (#2642)

ENHANCEMENTS:

• resource/cloudflare_access_application: adds the ability to associate a custom page with an application. (#2643)
• resource/cloudflare_access_organization: adds the ability to associate a custom page with an organization. (#2643)
• resource/cloudflare_notification_policy: Add support for pages_event_alert alert type (#2602)
• resource/cloudflare_pages_project: Allow renaming projects without destroying and recreating (#2602)
• resource/cloudflare_teams_account: Adds support for protocol detection feature (#2625)
• resource/cloudflare_user_agent_blocking_rules: add support for importing resources (#2640)

BUG FIXES:

• resource/cloudflare_custom_hostname: prevent infinite loop when wait_for_ssl_pending_validation is set if SSL status is already active (#2638)
• resource/cloudflare_load_balancer: fix full deletion of pop_pools, region_pools, country_pools on update (#2673)
• resource/cloudflare_load_balancer: handle inconsistent sorting bug in schema.HashResource resulting in resources incorrectly being updated when no changes have been made (#2635)
• resource/cloudflare_pages_project: deployment_configs are now computed (#2602)

DEPENDENCIES:

• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.29 to 1.18.32 (#2651)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.32 to 1.18.33 (#2670)
• provider: bumps github.com/aws/aws-sdk-go-v2/credentials from 1.13.28 to 1.13.31 (#2648)
• provider: bumps github.com/aws/aws-sdk-go-v2/service/s3 from 1.37.0 to 1.38.1 (#2650)
• provider: bumps github.com/cloudflare/cloudflare-go from 0.73.0 to 0.74.0 (#2652)
• provider: bumps github.com/hashicorp/terraform-plugin-framework from 1.3.3 to 1.3.4 (#2657)
• provider: bumps github.com/hashicorp/terraform-plugin-framework-validators from 0.10.0 to 0.11.0 (#2658)
• provider: bumps golang.org/x/net from 0.12.0 to 0.13.0 (#2646)
• provider: bumps golang.org/x/net from 0.13.0 to 0.14.0 (#2661)

v4.11.0

FEATURES:

• New Resource: cloudflare_regional_tiered_cache (#2624)

ENHANCEMENTS:

• resource/cloudflare_device_posture_integration: add support for managing sentinelone_s2s third party posture provider. (#2618)
• resource/cloudflare_device_posture_rule: add ability to create client_certificate and sentinelone_s2s posture rule (#2618)
• resource/cloudflare_load_balancer: support header session affinity policy (#2521)
• resource/record: Allow SVCB DNS record (#2632)

DEPENDENCIES:

• provider: bumps github.com/cloudflare/cloudflare-go from 0.72.0 to 0.73.0 (#2626)
• provider: bumps github.com/hashicorp/terraform-plugin-framework from 1.3.2 to 1.3.3 (#2627)
• provider: bumps github.com/hashicorp/terraform-plugin-mux from 0.11.1 to 0.11.2 (#2616)
• provider: bumps github.com/hashicorp/terraform-plugin-testing from 1.3.0 to 1.4.0 (#2631)

v4.10.0

FEATURES:

• New Data Source: clouflare_access_application (#2547)

ENHANCEMENTS:

• resource/cloudflare_access_ca_certificate: remove redundant certificate_id from Import requirements as it is never used (#2547)
• resource/cloudflare_load_balancer_monitor: Add example import. (#2572)

BUG FIXES:

• resource/cloudflare_load_balancer: fix import of load_balancer when rules included overrides or fixed_response (#2571)
• resource/cloudflare_record: fix importing of DNSKEY record types (#2568)
• resource/cloudflare_ruleset: Fix detection of conflicting entrypoint rulesets (#2566)

DEPENDENCIES:

• provider: bumps dependabot/fetch-metadata from 1.5.1 to 1.6.0 (#2557)
• provider: bumps github.com/cloudflare/cloudflare-go from 0.70.0 to 0.72.0 (#2584)
• provider: bumps github.com/hashicorp/terraform-plugin-framework from 1.3.1 to 1.3.2 (#2563)
• provider: bumps github.com/hashicorp/terraform-plugin-go from 0.17.0 to 0.18.0 (#2580)
• provider: bumps github.com/hashicorp/terraform-plugin-mux from 0.10.0 to 0.11.0 (#2564)
• provider: bumps github.com/hashicorp/terraform-plugin-mux from 0.11.0 to 0.11.1 (#2567)
• provider: bumps github.com/hashicorp/terraform-plugin-sdk/v2 from 2.26.1 to 2.27.0 (#2565)
• provider: bumps golang.org/x/net from 0.11.0 to 0.12.0 (#2589)

v4.9.0

NOTES:

• resource/cloudflare_pages_project: Clarify example projects resource (#2543)

ENHANCEMENTS:

• resource/cloudflare_notification_policy: Add alert_trigger_preferences to the filters block. (#2535)
• resource/cloudflare_waiting_room: Add additional_routes and cookie_suffix to the Waiting Room resource (#2528)

BUG FIXES:

• resource/cloudflare_access_ca_certificate: Fix issue with importing existing certificate as the application id was not being set. (#2539)
• resource/cloudflare_teams_rules: handle state correctly when rules_setting is empty (#2532)
• resource/cloudflare_tunnel_config: fix sending incorrect values for various timeouts in the origin configuration block (#2510)
• tunnel_config: fix nil pointers for time.Durations (#2504)

DEPENDENCIES:

• provider: bumps github.com/cloudflare/cloudflare-go from 0.69.0 to 0.70.0 (#2541)
• provider: bumps github.com/hashicorp/terraform-plugin-framework from 1.3.0 to 1.3.1 (#2529)
• provider: bumps github.com/hashicorp/terraform-plugin-go from 0.15.0 to 0.16.0 (#2536)

v4.8.0

BREAKING CHANGES:

• resource/cloudflare_ruleset: Prevent the rule ID, version and last updated attributes from being set (#2511)

ENHANCEMENTS:

• cloudflare_pages_project: add placement to deployment config (#2480)
• resource/access_application: add support for self_hosted_domains (#2441)
• resource/cloudflare_custom_hostname: add support for bundle_method TLS configuration (#2494)
• resource/cloudflare_device_posture_rule: add ability to create intune and kolide s2s posture rule creation (#2474)
• resource/cloudflare_device_settings_policy: add description to device settings policy (#2474)
• resource/cloudflare_load_balancer: Add support for least_outstanding_requests steering (#2472)
• resource/cloudflare_load_balancer_pool: Add support for least_outstanding_requests origin steering (#2472)
• resource/cloudflare_page_rule: removes ability to set wildcards for include and exclude, provides guidance on proper values to use instead (#2491)
• resource/cloudflare_teams_account: add ability to set root_ca for ZT Accounts (#2474)

BUG FIXES:

• cloudflare_pages_project: use user provided configuration for secrets in the state handler since the API does not return them (#2480)
• resource/cloudflare_certificate_pack: handle UI deletion scenarios for HTTP 404s and status = "deleted" responses (#2497)
• resource/cloudflare_custom_hostname: use user provided values for state management when the API response isn't provided (#2494)
• resource/cloudflare_origin_ca_certificate: mark csr as Required (#2496)
• resource/cloudflare_ruleset: Mark that the ruleset must be re-created if the shareable entitlement name attribute changes (#2511)
• resource/cloudflare_ruleset: Populate the rule ID, ref, version and last updated attributes in API requests and from API responses (#2511)
• resource/cloudflare_ruleset: Populate the shareable entitlement name attribute in API requests and from API responses (#2511)
• resource/cloudflare_ruleset: handle Import operations where the required values are missing for providing a nicer error message (#2503)

DEPENDENCIES:

• provider: bumps github.com/cloudflare/cloudflare-go from 0.68.0 to 0.69.0 (#2507)
• provider: bumps github.com/hashicorp/terraform-plugin-framework from 1.2.0 to 1.3.0 (#2509)
• provider: bumps github.com/hashicorp/terraform-plugin-log from 0.8.0 to 0.9.0 (#2489)
• provider: bumps github.com/hashicorp/terraform-plugin-testing from 1.2.0 to 1.3.0 (#2524)
• provider: bumps golang.org/x/net from 0.10.0 to 0.11.0 (#2523)
• provider: bumps goreleaser/goreleaser-action from 4.2.0 to 4.3.0 (#2519)

v4.7.1

BUG FIXES:

• resource/cloudflare_list: remove IsIPAddress validation that doesn't take into account CIDR notation (#2486)

v4.7.0

NOTES:

• resource/cloudflare_filter: This resource is being deprecated in favor of the cloudflare_rulesets resource. See https://developers.cloudflare.com/waf/reference/migration-guides/firewall-rules-to-custom-rules/#relevant-changes-for-terraform-users for more details. (#2442)
• resource/cloudflare_firewall_rule: This resource is being deprecated in favor of the cloudflare_rulesets resource. See https://developers.cloudflare.com/waf/reference/migration-guides/firewall-rules-to-custom-rules/#relevant-changes-for-terraform-users for more details. (#2442)

FEATURES:

• New Resource: cloudflare_r2_bucket (#2378)

ENHANCEMENTS:

• resource/cloudflare_account: provide account ID for error handling in resourceCloudflareAccountDelete (#2436)
• resource/cloudflare_device_posture_integration: add api_url to uptycs posture integration config. (#2468)
• resource/cloudflare_list: add support for Hostname and ASN lists. (#2483)
• resource/cloudflare_tunnel_config: add support for origin config on ingress rule and access (#2477)

BUG FIXES:

• resource/cloudflare_logpush_job: Properly set dataset field when importing logpush jobs (#2444)
• resource/cloudflare_pages_project: suggest a better default value for root_dir (#2440)
• resource/cloudflare_ruleset: Validation of ttls for action_parameters with edge_ttl or browser_ttl mode of override_origin (#2454)
• resource/cloudflare_workers_kv: Fix import to properly parse the id (#2434)

DEPENDENCIES:

• provider: bumps dependabot/fetch-metadata from 1.4.0 to 1.5.0 (#2463)
• provider: bumps dependabot/fetch-metadata from 1.5.0 to 1.5.1 (#2469)
• provider: bumps github.com/cloudflare/cloudflare-go from 0.67.0 to 0.68.0 (#2466)
• provider: bumps github.com/stretchr/testify from 1.8.2 to 1.8.3 (#2457)
• provider: bumps github.com/stretchr/testify from 1.8.3 to 1.8.4 (#2484)