From b1d63085b81f5da828b0be16e6e129c6c520fe38 Mon Sep 17 00:00:00 2001
From: Philip Skinner <philip.skinner@acurable.com>
Date: Fri, 22 Nov 2024 10:41:23 +0000
Subject: [PATCH] According to the documentation the enabled flag must be set
 to null (or nil) in order for the association to be destroyed. Setting this
 to false keeps the association in a disabled state instead of destroying the
 resource.

Documentation on this API endpoint can be found here:

https://developers.cloudflare.com/api/operations/per-hostname-authenticated-origin-pull-enable-or-disable-a-hostname-for-client-authentication

Referencing issue raised on provider:

https://github.com/cloudflare/terraform-provider-cloudflare/issues/4648
---
 .../resource_cloudflare_authenticated_origin_pulls.go           | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/sdkv2provider/resource_cloudflare_authenticated_origin_pulls.go b/internal/sdkv2provider/resource_cloudflare_authenticated_origin_pulls.go
index 5adc00ed8e9..b969ec9dbcd 100644
--- a/internal/sdkv2provider/resource_cloudflare_authenticated_origin_pulls.go
+++ b/internal/sdkv2provider/resource_cloudflare_authenticated_origin_pulls.go
@@ -123,7 +123,7 @@ func resourceCloudflareAuthenticatedOriginPullsDelete(ctx context.Context, d *sc
 		conf := []cloudflare.PerHostnameAuthenticatedOriginPullsConfig{{
 			CertID:   aopCert,
 			Hostname: hostname,
-			Enabled:  false,
+			Enabled:  nil,
 		}}
 		_, err := client.EditPerHostnameAuthenticatedOriginPullsConfig(ctx, zoneID, conf)
 		if err != nil {