v3.17.0

BREAKING CHANGES:

• resource/cloudflare_ruleset: deprecates enabled in overridden configurations immediately in favour of status (#1689)

FEATURES:

• New Resource: cloudflare_tunnel_virtual_network (#1672)

ENHANCEMENTS:

• resource/cloudflare_access_identity_provider: Add support for PKCE when creating IDPS. (#1667)
• resource/cloudflare_device_posture_integration: add support for managing uptycs, intune and crowdstrike third party posture providers. (#1628)
• resource/cloudflare_ipsec_tunnel: add support for healthcheck_enabled, health_check_target, healthcheck_type, psk (#1685)
• resource/cloudflare_logpush_job: Add filter field support (#1660)
• resource/cloudflare_tunnel_route: Add virtual_network_id attribute (#1668)

BUG FIXES:

v3.16.0

NOTES:

• provider: swap internal logging mechanism to use tflog (#1638)
• provider: updated internal package structure of repository (#1636)

ENHANCEMENTS:

• resource/cloudflare_access_group: add support for external evaluation as a new access group rule (#1623)
• resource/cloudflare_argo_tunnel: add tunnel_token support (#1590)
• resource/cloudflare_logpush_job: add support for specifying frequency (#1634)
• resource/cloudflare_ruleset: add support for custom fields logging (#1630)
• resource/cloudflare_waiting_room: Add default_template_language field. (#1651)

BUG FIXES:

• resource/cloudflare_access_application: Fix inability to update http_only_cookie_attribute to false (#1602)
• resource/cloudflare_waiting_room_event: handle time pointer for nullable struct member (#1648)
• resource/cloudflare_workers_kv: handle invalid id during terraform import (#1635)

v3.15.0

NOTES:

• provider: internally swapped to using diag.Diagnostics for CRUD return types and using context.Context passed in from the provider itself instead of instantiating our own in each operation (#1592)

ENHANCEMENTS:

• resource/cloudflare_device_posture_rule: Add expiration to device posture rule (#1585)
• resource/cloudflare_logpush_job: add support for managing network_analytics_logs (#1627)
• resource/cloudflare_logpush_job: allow r2 logpush destinations without ownership validation (#1597)
• resource/ruleset: add support for origin and host_header attributes (#1620)

BUG FIXES:

• resource/cloudflare_access_rule: Fix lifecycle of access_rule update (#1601)
• resource/cloudflare_spectrum_application: prevent panic when configuration does not include edge_ips.connectivity (#1599)
• resource/cloudflare_teams_rule: fixed detection of deleted teams rules (#1622)

v3.14.0

FEATURES:

• New Resource: cloudflare_tunnel_route (#1572)

ENHANCEMENTS:

• resource/cloudflare_certificate_pack: add support for new option (wait_for_active_status) to block creation until certificate pack is active (#1567)
• resource/cloudflare_notification_policy: Add slo to notification policy filters (#1573)
• resource/cloudflare_teams_list: Add support for IP type (#1550)

BUG FIXES:

• cloudflare_tunnel_routes: Fix reads matching routers with larger CIDRs (#1581)
• resource/cloudflare_access_group: allow github access groups to be created without a list of teams (#1589)
• resource/cloudflare_logpush_job: make ownership challenge check for https not required (#1588)
• resource/cloudflare_tunnel_route: Fix importing resource (#1580)
• resource/cloudflare_zone: update plan identifier for professional rate plans (#1583)

v3.13.0

NOTES:

• resource/cloudflare_byo_ip_prefix: now requires an explicit account_id parameter instead of implicitly relying on client.AccountID (#1563)
• resource/cloudflare_ip_list: no longer sets client.AccountID internally for resources (#1563)
• resource/cloudflare_magic_firewall_ruleset: no longer sets client.AccountID internally for resources (#1563)
• resource/cloudflare_static_route: no longer sets client.AccountID internally for resources (#1563)
• resource/cloudflare_worker_cron_trigger: now requires an explicit account_id parameter instead of implicitly relying on client.AccountID (#1563)

ENHANCEMENTS:

• resource/cloudflare_custom_pages: add support for managed_challenge action (#1478)
• resource/cloudflare_ruleset: add support for rule logging (#1538)

v3.12.2

ENHANCEMENTS:

• resource/cloudflare_ruleset: Setting description to Optional to better reflect API requirements (#1556)

v3.12.1

BUG FIXES:

• resource/cloudflare_zone: don't get stuck in endless loop for partner zone rate plans (#1547)

v3.12.0

NOTES:

• resource/cloudflare_healthcheck: notification_suspended and notification_email_addresses attributes are being deprecated in favour of cloudflare_notification_policy resource instead. (#1529)

FEATURES:

• New Resource: cloudflare_access_bookmark (#1539)

ENHANCEMENTS:

• resource/cloudflare_access_application: Add service_auth_401_redirect field. (#1540)

BUG FIXES:

• resource/cloudflare_api_token: ignore ordering changes in permission_groups (#1545)
• resource/cloudflare_notification_policy: Fix unexpected crashes when using cloudflare_notification_policy with a filters attribute (#1542)
• resource/cloudflare_zone_dnssec: don't try to enable DNSSEC when state is "pending" (#1530)

v3.11.0

NOTES:

• resource/cloudflare_origin_ca_certificate: requested_validity no longer decrements until the expires_on value but is now the amount of days the certificate was requested for. (#1502)

FEATURES:

• New Resource: cloudflare_teams_proxy_endpoint (#1517)
• New Resource: cloudflare_waiting_room_event (#1509)

ENHANCEMENTS:

• resource/cloudflare_page_rule: add support for actions.disable_zaraz (#1523)
• resource/cloudflare_ruleset: add support for action_parameters.response to control the response when triggering a WAF rule (#1507)
• resource/cloudflare_ruleset: add support for ratelimit.requests_to_origin (#1507)

BUG FIXES:

• resource/cloudflare_device_posture_integration: remove superfluous id from schema (#1504)
• resource/cloudflare_spectrum_application: Fix 'edge_ip_connectivity' state persistence (#1515)

v3.10.1

BUG FIXES:

• resource/cloudflare_ruleset: don't attempt to upgrade ratelimit if it isn't set (#1501)