cloudflare · stainless-app · Feb 13, 2025 · Feb 13, 2025 · Feb 13, 2025 · Feb 13, 2025
diff --git a/.release-please-manifest.json b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "5.1.0"
+  ".": "5.2.0"
 }
diff --git a/.stats.yml b/.stats.yml
@@ -1,2 +1,2 @@
-configured_endpoints: 1525
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cloudflare%2Fcloudflare-fc562128cab85cd116a8c4e1fe17a0f09a5019da2d1bbe162c476aa999932c4e.yml
+configured_endpoints: 1542
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cloudflare%2Fcloudflare-bd2b482a83809b029aec6ad87f8bec570c067383f102c15fb9e8483110398194.yml
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,62 @@
 # Changelog
 
+## 5.2.0 (2025-02-27)
+
+Full Changelog: [v5.1.0...v5.2.0](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.1.0...v5.2.0)
+
+### ⚠ BREAKING CHANGES
+
+* **tunnels:** move all cloudflared resources into dedicated namespace ([#5143](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5143))
+
+### Features
+
+* add doc string to specify what legal terraform values are for enums ([#5199](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5199)) ([b99d403](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b99d403aa24264e538dcb98387741b1ae70307f6))
+* **api_token_permission_groups:** split off account/user into dedicated endpoints ([#5162](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5162)) ([c6d07be](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c6d07be33998cc6f9f1c4064f81d4ed65fe74e89))
+* **api:** api update ([#5137](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5137)) ([222d9e1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/222d9e1adcd47b8e459deb946babe42b952500ae))
+* **api:** api update ([#5154](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5154)) ([013bfea](https://github.com/cloudflare/terraform-provider-cloudflare/commit/013bfead10af49cc3f244a45b46cfef6f2f198c7))
+* **api:** api update ([#5160](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5160)) ([4214c9b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4214c9bb36dd50b752fca6f13d0818f904aa464c))
+* **api:** api update ([#5165](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5165)) ([89bf11e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/89bf11ecb9d5cccf887cf1d78acddd66ce93ce26))
+* **api:** api update ([#5172](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5172)) ([a55499b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a55499b0e3f1819e17d66e7eb163e1face86b8aa))
+* **api:** api update ([#5188](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5188)) ([dc93f59](https://github.com/cloudflare/terraform-provider-cloudflare/commit/dc93f59d743049eaa4b6b3248f26a6550d793535))
+* **api:** api update ([#5193](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5193)) ([6077aff](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6077aff3e62a2095c380f0abffb91b4d8c3a073b))
+* **api:** api update ([#5194](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5194)) ([8516e97](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8516e979958c19b9bb58d2b6084aaebdf7d29ff2))
+* **api:** api update ([#5197](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5197)) ([4574dba](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4574dbaa1ac2f32acf62721c328d6a79f210c250))
+* **api:** api update ([#5209](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5209)) ([6fed8b5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6fed8b57412586625ad5ca4a10ae22c4f75b80d9))
+* **api:** api update ([#5210](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5210)) ([ae0d2ce](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ae0d2ce011a0c3da5fd09e706bf3f79196e516d2))
+* **authenticated_origin_pulls_settings:** add support ([#5180](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5180)) ([2e7eb91](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2e7eb91fe6cd24fdf40f1d6a8213cd304b9913f5))
+* **authenticated_origin_pulls_settings:** handle upsert deletion ([b4fcc5c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b4fcc5cabef6be1bf33a26744738b51f6c423799))
+* **dns_record:** toggle stricter drift detection ([#5212](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5212)) ([b59d34c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b59d34c9665826939167b3f487590d8dcfbff6de))
+* **firewall_rules:** remove duplicated `id` query parameter ([#5155](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5155)) ([a163794](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a163794281a4517afba103e99b27d6f45cc9b1cd))
+* **grit:** add `account_id` =&gt; `account.id` migration for cloudflare_zone ([7bb3f3f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7bb3f3f36c399dce62dcf204328e8ecce69ecef4))
+* **grit:** remove `plan` and `jump_start` from zone state ([091523e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/091523e8d106d76e0d228787cf93751e1aea0a8a))
+* **r2:** add support for jurisdictions on all resources ([51961a9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/51961a9aa4982637f87375496b5e4fc7a3ac90d6))
+* **ruleset:** toggle stricter drift detection ([#5213](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5213)) ([71156b0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/71156b002b9336ef42d6438ed7301e81a3fb4395))
+* **terraform:** mark some attributes as sensitive ([#5170](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5170)) ([f7ac77e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f7ac77e81ddf82e258ca88e544b3eaf9f69c703c))
+* **tunnels:** move all cloudflared resources into dedicated namespace ([#5143](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5143)) ([010615f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/010615fa7ca4989487bba7a1194c80ee0ebfc0cb))
+
+
+### Bug Fixes
+
+* **api_token:** store `value` out of band of marshaler ([4165021](https://github.com/cloudflare/terraform-provider-cloudflare/commit/416502103b9187b9d1be9e408cae2dc982a2b351))
+* **authenticated_origin_pulls_settings:** remove manual delete handling ([dc66e55](https://github.com/cloudflare/terraform-provider-cloudflare/commit/dc66e55f2cf3ffb318c6b7a28c7b9f372aa10f02))
+* **client:** mark some request bodies as optional ([#5168](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5168)) ([2416e12](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2416e12a118347fd06c705c7bb75bf4f85293a16))
+* **datasource:** honor query params in non-list data sources ([#5151](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5151)) ([fd0cb35](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fd0cb357bbc806fe991354955ae5868afe028578))
+* **datasource:** improve configurability of path parameters on data sources ([#5147](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5147)) ([7033468](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7033468d093806d9376c64cb91e51e9ec282406d))
+* restrict schema version reset to cloudflare owned resources ([5565468](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5565468988289c097d283a87d40954cf95e7fb30))
+* **zero_trust_tunnel_cloudflared_token:** map `token` to top level `result ([db778c1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/db778c11678f5691052f3b894d83996e7e828fd4))
+
+
+### Chores
+
+* casing change in doc string ([#5200](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5200)) ([71e290f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/71e290fd9e56e877731457695c1ccae3a998abad))
+* **internal:** codegen related update ([#5211](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5211)) ([316b5f0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/316b5f0716342f62a10f0885e8f7c041fcda3d07))
+
+
+### Documentation
+
+* clarify list_item split ([fb275ea](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fb275ea35b7d21dedbef9248790ff9441a0d279c))
+* generate ([a62eeae](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a62eeae98f45392260f8f5928493914fbaaa905f))
+
 ## 5.1.0 (2025-02-13)
 
 Full Changelog: [v5.0.0...v5.1.0](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.0.0...v5.1.0)

diff --git a/...a-sources/api_token_permissions_groups.md → ...es/account_api_token_permission_groups.md b/...a-sources/api_token_permissions_groups.md → ...es/account_api_token_permission_groups.md
@@ -1,18 +1,18 @@
 ---
-page_title: "cloudflare_api_token_permissions_groups Data Source - Cloudflare"
+page_title: "cloudflare_account_api_token_permission_groups Data Source - Cloudflare"
 subcategory: ""
 description: |-
   
 ---
 
-# cloudflare_api_token_permissions_groups (Data Source)
+# cloudflare_account_api_token_permission_groups (Data Source)
 
 
 
 ## Example Usage
 
 ```terraform
-data "cloudflare_api_token_permissions_groups" "example_api_token_permissions_groups" {
+data "cloudflare_account_api_token_permission_groups" "example_account_api_token_permission_groups" {
   account_id = "eb78d65290b24279ba6f44721b3ea3c4"
 }
 ```

diff --git a/...rces/api_token_permissions_groups_list.md → ...count_api_token_permission_groups_list.md b/...rces/api_token_permissions_groups_list.md → ...count_api_token_permission_groups_list.md
@@ -1,18 +1,18 @@
 ---
-page_title: "cloudflare_api_token_permissions_groups_list Data Source - Cloudflare"
+page_title: "cloudflare_account_api_token_permission_groups_list Data Source - Cloudflare"
 subcategory: ""
 description: |-
 
 ---
 
-# cloudflare_api_token_permissions_groups_list (Data Source)
+# cloudflare_account_api_token_permission_groups_list (Data Source)
 
 
 
 ## Example Usage
 
 ```terraform
-data "cloudflare_api_token_permissions_groups_list" "example_api_token_permissions_groups_list" {
+data "cloudflare_account_api_token_permission_groups_list" "example_account_api_token_permission_groups_list" {
   account_id = "eb78d65290b24279ba6f44721b3ea3c4"
 }
 ```

diff --git a/docs/data-sources/permission_group.md → .../data-sources/account_permission_group.md b/docs/data-sources/permission_group.md → .../data-sources/account_permission_group.md
@@ -1,18 +1,18 @@
 ---
-page_title: "cloudflare_permission_group Data Source - Cloudflare"
+page_title: "cloudflare_account_permission_group Data Source - Cloudflare"
 subcategory: ""
 description: |-
 
 ---
 
-# cloudflare_permission_group (Data Source)
+# cloudflare_account_permission_group (Data Source)
 
 
 
 ## Example Usage
 
 ```terraform
-data "cloudflare_permission_group" "example_permission_group" {
+data "cloudflare_account_permission_group" "example_account_permission_group" {
   account_id = "eb78d65290b24279ba6f44721b3ea3c4"
   permission_group_id = "6d7f2f5f5b1d4a0e9081fdc98d432fd1"
 }
@@ -21,10 +21,9 @@ data "cloudflare_permission_group" "example_permission_group" {
 <!-- schema generated by tfplugindocs -->
 ## Schema
 
-### Optional
+### Required
 
 - `account_id` (String) Account identifier tag.
-- `filter` (Attributes) (see [below for nested schema](#nestedatt--filter))
 - `permission_group_id` (String) Permission Group identifier tag.
 
 ### Read-Only
@@ -33,20 +32,6 @@ data "cloudflare_permission_group" "example_permission_group" {
 - `meta` (Attributes) Attributes associated to the permission group. (see [below for nested schema](#nestedatt--meta))
 - `name` (String) Name of the group.
 
-<a id="nestedatt--filter"></a>
-### Nested Schema for `filter`
-
-Required:
-
-- `account_id` (String) Account identifier tag.
-
-Optional:
-
-- `id` (String) ID of the permission group to be fetched.
-- `label` (String) Label of the permission group to be fetched.
-- `name` (String) Name of the permission group to be fetched.
-
-
 <a id="nestedatt--meta"></a>
 ### Nested Schema for `meta`
 

diff --git a/docs/data-sources/permission_groups.md → ...data-sources/account_permission_groups.md b/docs/data-sources/permission_groups.md → ...data-sources/account_permission_groups.md
@@ -1,18 +1,18 @@
 ---
-page_title: "cloudflare_permission_groups Data Source - Cloudflare"
+page_title: "cloudflare_account_permission_groups Data Source - Cloudflare"
 subcategory: ""
 description: |-
   
 ---
 
-# cloudflare_permission_groups (Data Source)
+# cloudflare_account_permission_groups (Data Source)
 
 
 
 ## Example Usage
 
 ```terraform
-data "cloudflare_permission_groups" "example_permission_groups" {
+data "cloudflare_account_permission_groups" "example_account_permission_groups" {
   account_id = "eb78d65290b24279ba6f44721b3ea3c4"
   id = "6d7f2f5f5b1d4a0e9081fdc98d432fd1"
   label = "labelOfThePermissionGroup"

diff --git a/docs/data-sources/api_shield_schema.md b/docs/data-sources/api_shield_schema.md
@@ -24,6 +24,7 @@ data "cloudflare_api_shield_schema" "example_api_shield_schema" {
 
 ### Required
 
+- `schema_id` (String)
 - `zone_id` (String) Identifier
 
 ### Optional
@@ -35,7 +36,6 @@ data "cloudflare_api_shield_schema" "example_api_shield_schema" {
 - `created_at` (String)
 - `kind` (String) Kind of schema
 - `name` (String) Name of the schema
-- `schema_id` (String)
 - `source` (String) Source of the schema
 - `validation_enabled` (Boolean) Flag whether schema is enabled for validation.
 

diff --git a/docs/data-sources/api_token_permission_groups_list.md b/docs/data-sources/api_token_permission_groups_list.md
@@ -0,0 +1,40 @@
+---
+page_title: "cloudflare_api_token_permission_groups_list Data Source - Cloudflare"
+subcategory: ""
+description: |-
+
+---
+
+# cloudflare_api_token_permission_groups_list (Data Source)
+
+
+
+## Example Usage
+
+```terraform
+data "cloudflare_api_token_permission_groups_list" "example_api_token_permission_groups_list" {
+
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Optional
+
+- `max_items` (Number) Max items to fetch, default: 1000
+
+### Read-Only
+
+- `result` (Attributes List) The items returned by the data source (see [below for nested schema](#nestedatt--result))
+
+<a id="nestedatt--result"></a>
+### Nested Schema for `result`
+
+Read-Only:
+
+- `id` (String) Public ID.
+- `name` (String) Permission Group Name
+- `scopes` (List of String) Resources to which the Permission Group is scoped
+
+
diff --git a/docs/data-sources/authenticated_origin_pulls.md b/docs/data-sources/authenticated_origin_pulls.md
@@ -23,6 +23,7 @@ data "cloudflare_authenticated_origin_pulls" "example_authenticated_origin_pulls
 
 ### Required
 
+- `hostname` (String) The hostname on the origin for which the client certificate uploaded will be used.
 - `zone_id` (String) Identifier
 
 ### Read-Only
@@ -35,7 +36,6 @@ data "cloudflare_authenticated_origin_pulls" "example_authenticated_origin_pulls
 - `created_at` (String) The time when the certificate was created.
 - `enabled` (Boolean) Indicates whether hostname-level authenticated origin pulls is enabled. A null value voids the association.
 - `expires_on` (String) The date when the certificate expires.
-- `hostname` (String) The hostname on the origin for which the client certificate uploaded will be used.
 - `issuer` (String) The certificate authority that issued the certificate.
 - `serial_number` (String) The serial number on the uploaded certificate.
 - `signature` (String) The type of hash used for the certificate.

diff --git a/docs/data-sources/authenticated_origin_pulls_settings.md b/docs/data-sources/authenticated_origin_pulls_settings.md
@@ -0,0 +1,31 @@
+---
+page_title: "cloudflare_authenticated_origin_pulls_settings Data Source - Cloudflare"
+subcategory: ""
+description: |-
+
+---
+
+# cloudflare_authenticated_origin_pulls_settings (Data Source)
+
+
+
+## Example Usage
+
+```terraform
+data "cloudflare_authenticated_origin_pulls_settings" "example_authenticated_origin_pulls_settings" {
+  zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `zone_id` (String) Identifier
+
+### Read-Only
+
+- `enabled` (Boolean) Indicates whether zone-level authenticated origin pulls is enabled.
+
+
diff --git a/docs/data-sources/byo_ip_prefix.md b/docs/data-sources/byo_ip_prefix.md
@@ -21,13 +21,16 @@ data "cloudflare_byo_ip_prefix" "example_byo_ip_prefix" {
 <!-- schema generated by tfplugindocs -->
 ## Schema
 
+### Required
+
+- `account_id` (String) Identifier of a Cloudflare account.
+
 ### Optional
 
 - `prefix_id` (String) Identifier of an IP Prefix.
 
 ### Read-Only
 
-- `account_id` (String) Identifier of a Cloudflare account.
 - `advertised` (Boolean) Prefix advertisement status to the Internet. This field is only not 'null' if on demand is enabled.
 - `advertised_modified_at` (String) Last time the advertisement status was changed. This field is only not 'null' if on demand is enabled.
 - `approved` (String) Approval state of the prefix (P = pending, V = active).

diff --git a/docs/data-sources/custom_ssl.md b/docs/data-sources/custom_ssl.md
@@ -21,6 +21,10 @@ data "cloudflare_custom_ssl" "example_custom_ssl" {
 <!-- schema generated by tfplugindocs -->
 ## Schema
 
+### Required
+
+- `zone_id` (String) Identifier
+
 ### Optional
 
 - `custom_certificate_id` (String) Identifier
@@ -41,7 +45,6 @@ data "cloudflare_custom_ssl" "example_custom_ssl" {
 - `signature` (String) The type of hash used for the certificate.
 - `status` (String) Status of the zone's custom SSL.
 - `uploaded_on` (String) When the certificate was uploaded to Cloudflare.
-- `zone_id` (String) Identifier
 
 <a id="nestedatt--filter"></a>
 ### Nested Schema for `filter`

diff --git a/docs/data-sources/firewall_rule.md b/docs/data-sources/firewall_rule.md
@@ -15,7 +15,6 @@ description: |-
 data "cloudflare_firewall_rule" "example_firewall_rule" {
   zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
   rule_id = "372e67954025e0ba6aaa6d586b9e0b60"
-  id = "372e67954025e0ba6aaa6d586b9e0b60"
 }
 ```
 

diff --git a/docs/data-sources/load_balancer.md b/docs/data-sources/load_balancer.md
@@ -69,6 +69,7 @@ data "cloudflare_load_balancer" "example_load_balancer" {
 - `"ip_cookie"`: Behaves the same as `"cookie"` except the initial origin selection is stable and based on the client's ip address.
 - `"header"`: On the first request to a proxied load balancer, a session key based on the configured HTTP headers (see `session_affinity_attributes.headers`) is generated, encoding the request headers used for storing in the load balancer session state which origin the request will be forwarded to. Subsequent requests to the load balancer with the same headers will be sent to the same origin server, for the duration of the session and as long as the origin server remains healthy. If the session has been idle for the duration of `session_affinity_ttl` seconds or the origin server is unhealthy, then a new origin server is calculated and used. See `headers` in `session_affinity_attributes` for additional required configuration.
 - `session_affinity_attributes` (Attributes) Configures attributes for session affinity. (see [below for nested schema](#nestedatt--session_affinity_attributes))
+- `zone_name` (String)
 
 <a id="nestedatt--adaptive_routing"></a>
 ### Nested Schema for `adaptive_routing`

diff --git a/docs/data-sources/load_balancers.md b/docs/data-sources/load_balancers.md
@@ -78,6 +78,7 @@ Read-Only:
 - `"ip_cookie"`: Behaves the same as `"cookie"` except the initial origin selection is stable and based on the client's ip address.
 - `"header"`: On the first request to a proxied load balancer, a session key based on the configured HTTP headers (see `session_affinity_attributes.headers`) is generated, encoding the request headers used for storing in the load balancer session state which origin the request will be forwarded to. Subsequent requests to the load balancer with the same headers will be sent to the same origin server, for the duration of the session and as long as the origin server remains healthy. If the session has been idle for the duration of `session_affinity_ttl` seconds or the origin server is unhealthy, then a new origin server is calculated and used. See `headers` in `session_affinity_attributes` for additional required configuration.
 - `session_affinity_attributes` (Attributes) Configures attributes for session affinity. (see [below for nested schema](#nestedatt--result--session_affinity_attributes))
+- `zone_name` (String)
 
 <a id="nestedatt--result--adaptive_routing"></a>
 ### Nested Schema for `result.adaptive_routing`

diff --git a/docs/data-sources/magic_transit_site_lan.md b/docs/data-sources/magic_transit_site_lan.md
@@ -25,6 +25,7 @@ data "cloudflare_magic_transit_site_lan" "example_magic_transit_site_lan" {
 ### Required
 
 - `account_id` (String) Identifier
+- `site_id` (String) Identifier
 
 ### Optional
 
@@ -38,7 +39,6 @@ data "cloudflare_magic_transit_site_lan" "example_magic_transit_site_lan" {
 - `nat` (Attributes) (see [below for nested schema](#nestedatt--nat))
 - `physport` (Number)
 - `routed_subnets` (Attributes List) (see [below for nested schema](#nestedatt--routed_subnets))
-- `site_id` (String) Identifier
 - `static_addressing` (Attributes) If the site is not configured in high availability mode, this configuration is optional (if omitted, use DHCP). However, if in high availability mode, static_address is required along with secondary and virtual address. (see [below for nested schema](#nestedatt--static_addressing))
 - `vlan_tag` (Number) VLAN port number.