v3.1.0

ENHANCEMENTS:

• resource/cloudflare_ruleset: add support for ddos_l7 configuration (#1212)

v3.0.1

ENHANCEMENTS:

• resource/cloudflare_access_rule: add state migrator for 3.x (#1211)
• resource/cloudflare_custom_ssl: add state migrator for 3.x (#1211)
• resource/cloudflare_load_balancer: add state migrator for 3.x (#1211)
• resource/cloudflare_record: add state migrator for 3.x (#1211)

v3.0.0

Please follow the 2.x to 3.x upgrade guide for migrating versions.

BREAKING CHANGES:

• resource/cloudflare_access_rule: configuration is now a TypeList instead of a TypeMap (#1188)
• resource/cloudflare_custom_ssl: custom_ssl_options is now a TypeList instead of TypeMap (#1188)
• resource/cloudflare_load_balancer: fixed_response is now a TypeList instead of a TypeMap (#1188)
• resource/cloudflare_load_balancer: fixed_response.status_codeis now aTypeIntinstead of aTypeString` (#1188)
• resource/cloudflare_record: data is now a TypeList instead of a TypeMap (#1188)

NOTES:

• provider: Golang version has been upgraded to 1.17 (#1188)
• provider: HTTP user agent is now "terraform/:version terraform-plugin-sdk/:version terraform-provider-cloudflare/:version" (#1188)
• provider: Minimum Terraform core version is now 0.14 (#1188)
• provider: terraform-plugin-sdk has been upgraded to 2.x (#1188)

ENHANCEMENTS:

• resource/cloudflare_custom_hostname: settings.ciphers is now a TypeSet internally to handle suppress ordering changes. Schema representation remains the same (#1188)
• resource/cloudflare_custom_hostname: settings is now Optional/Computed to reflect the stricter schema validation introduced in terraform-plugin-sdk v2 (#1188)
• resource/cloudflare_custom_hostname: status is now Computed as the value isn't managed by an end user (#1188)

v2.27.0

NOTES:

• provider: Update to cloudflare-go v0.22.0 (#1184)

FEATURES:

• New Resource: cloudflare_access_keys_configuration (#1186)
• New Resource: cloudflare_teams_account (#1173)
• New Resource: cloudflare_teams_rule (#1173)

ENHANCEMENTS:

• resource/cloudflare_access_policy: add support for purpose justification and approvals (#1199)
• resource/cloudflare_ruleset: add support for HTTP rate limiting (#1179)
• resource/cloudflare_ruleset: add support for Transform Rules (#1169)
• resource/cloudflare_ruleset: add support for WAF payload logging (#1174)
• resource/cloudflare_ruleset: add support for more complex skip ruleset configurations (#1201)

BUG FIXES:

• resource/cloudflare_ruleset: fix state handling for terraform-plugin-sdk v2 (#1183)
• resource/cloudflare_zone_settings_override: remap zero_rtt => 0rtt for resource delete (#1175)

v2.26.1

Fixes

• resource/cloudflare_ruleset: Send a single payload for rules instead of many individual payloads to prevent overwriting previous rules (#1171)

v2.26.0

• New resource: cloudflare_notification_policy (#1138)
• New resource: cloudflare_notification_policy_webhooks (#1151)
• New resource: cloudflare_ruleset (#1143)
• New resource: cloudflare_teams_location (#1154)
• New datasource: cloudflare_origin_ca_root_certificate (#1158)

Improvements

• resource/cloudflare_waiting_room: Add support for json_response_enabled as an argument (#1122)

v2.25.0

Improvements

• resource/cloudflare_access_device_posture_rule: Add support for domain_joined, firewall, os_version, and disk_encryption (#1137)
• provider: bump cloudflare-go to v0.20.0 (#1146)
• docs: include steps for building and using custom provider in Terraform Cloud

v2.24.0

Improvements

• resource/cloudflare_logpush_job: Add support for "nel_reports" as a dataset (#1122)
• resource/cloudflare_custom_hostname: Allow SSL options to be optional when not required (#1131)
• resource/cloudflare_access_identity_provider: Support optional Okta API token (#1119)
• resource/cloudflare_load_balancer_pool: Add support for load shedding (#1108)
• resource/cloudflare_load_balancer_pool: Add support for longitude and latitude (#1093)

Fixes

• resource/cloudflare_record: Use correct Import method on resource (#1116)
• resource/cloudflare_worker_cron_trigger: Account for deletion of scripts and force a refresh of triggers (#1121)
• resource/cloudflare_rate_limit: Handle origin_traffic missing from API response (#1125)
• resource/cloudflare_record: Support allow_overwrite for root records (#1129)

v2.23.0

• New resource: cloudflare_waiting_room (#1053)

Improvements

• datasource/cloudflare_waf_rules: Export default_mode as an attribute (#1079)

Fixes

• resource/cloudflare_access_application: Revert removal of schema changes causing existing applications unable to re-apply (#1118)

v2.22.0

• New resource: cloudflare_static_route (#1098)

Improvements

• resource/cloudflare_origin_ca: Ignore decreasing requested_validity (#1043)
• resource/waf_override: Allow rules to be optional (#1090)
• resource/cloudflare_zone: Don't attempt to set free zone rate plans as that is already the default (#1102)
• resource/cloudflare_access_application: Ability to set type for Applications (#1076)
• resource/cloudflare_zone_lockdown: Update documentation to show examples of multiple configurations (#1106)