CHANGELOG.md

2.0.9 (2026-02-10)

Bug Fixes

• terraform: allow empty location objects when schema has no attributes (#700) (82c2549)

2.0.8 (2026-01-20)

Bug Fixes

• codegen: Generate correct encrypted values handling code for variants (#688) (da168bd)
• terraform: Fix the generate_import_id function to better handle inline objects (#692) (c16178e)
• terraform: Handle attributes transitioning from plaintext to encrypted (#689) (a342eeb)
• terraform: Update virtual-router spec and mark secret as hashed, and remove default values from variants (#696) (b5815c8)

Features

• codegen: Add support for custom validation and action attributes (#670) (feda3f3)
• specs: Add spec and examples for panos_push_to_devices action (#671) (d8ce4d0)
• specs: Expand commit action with additional attributes (#672) (41dbb71)

2.0.7 (2025-11-25)

Bug Fixes

• specs: Add missing ngfw location for panos_ipsec_tunnel (#613) (f0d5ee7)
• specs: Change schema for template stack devices (#677) (3153e8b)

Features

• codegen: Add support for terraform actions (#609) (0987b78)
• specs: Add spec, tests and examples for panos_bgp_address_family_routing_profile (#623) (f797549)
• specs: Add spec, tests and examples for panos_bgp_dampening_routing_profile (#625) (bb55a52)
• specs: Add spec, tests and examples for panos_bgp_redistribution_routing_profile (#633) (446a02b)
• specs: Add spec, tests and examples for panos_bgp_timer_routing_profile (#624) (9190f6f)
• specs: Add spec, tests and examples for panos_filters_access_list_routing_profile (#637) (63740ee)
• specs: Add spec, tests and examples for panos_filters_as_path_access_list_routing_profile (#627) (0ecbfbc)
• specs: Add spec, tests and examples for panos_filters_community_list_routing_profile (#626) (b51aa26)
• specs: Add spec, tests and examples for panos_filters_prefix_list_routing_profile (#636) (964850b)
• specs: Add spec, tests and examples for panos_filters_route_map_redistribution_routing_profile (#630) (3babadf)
• specs: Add test, specs and examples for panos_bgp_filtering_routing_profile (#631) (abe69ea)
• specs: Add test, specs and examples for panos_filters_bgp_route_map_routing_profile (#647) (36fdd6a)
• specs: Create spec, tests and examples for panos_commit action (#610) (eb6ebe7)

2.0.6 (2025-11-19)

Bug Fixes

• codegen: Fix XML marshalling code for panos_ssl_decrypt resource (#639) (05e05ba)
• codegen: Generate correct terraform code for int64 lists (#548) (a795dac)
• codegen: Make audit comment code generation optional based on location (#559) (3717c25)
• codegen: support multiple encrypted values within a single object (#534) (0d411f5)
• specs: fix locations for ssl-tls-profile (#550) (1a93eb0)
• specs: Mark IKE Gateway pre shared key as hashed value (#554) (7f10bc6)
• terraform: Handle position attribute within lifecycle.ignore_changes (#552) (07739bf)
• terraform: handle update of security rules when some entries are missing (#555) (b498cd5)
• terraform: Make panos_addresses only manage addresses from the state (#571) (5a48863)
• terraform: properly handle object renaming (#570) (7282002)
• terraform: skip validation of position attributes when not known at validation (#527) (bedcf3c)
• tests: use template stack location for template variable meant for stack (#553) (02b8324)

Features

• codegen: Add support for disabling of variant group validation (#536) (ac6816e)
• codegen: Configure codegen log level and hide most output behind debug level (#538) (04d0a1a)
• codegen: pass sdk client to custom hashing functions (#546) (b715637)
• codegen: Support overriding of terraform parameter optional value (#547) (4581bea)
• codegen: Use generic custom code dispatcher (#608) (63e904e)
• codegen: use terraform types for structures and lists (#531) (a25d30c)
• gosdk: Enable optional Basic access authentication via headers (#551) (5ea1d63)
• specs: Add spec, tests and example for certificate import (#495) (76c1d8a)
• specs: Add spec, tests and examples for authentication profiles (#481) (0dcbfb1)
• specs: Add spec, tests and examples for globalprotect-gateway (#549) (ab8055c)
• specs: Add spec, tests and examples for globalprotect-portal (#535) (2ba9f0e)
• specs: Add spec, tests and examples for panos_correlation_log_settings (#563) (0aeb329)
• specs: Add spec, tests and examples for panos_proxy_settings (#557) (dba8100)
• specs: Create spec, tests and examples for panos_config_log_settings (#564) (027bd84)
• specs: Create spec, tests and examples for panos_default_security_policy (#560) (424641e)
• specs: Create spec, tests and examples for panos_globalprotect_log_settings (#566) (200a7cb)
• specs: Create spec, tests and examples for panos_hipmatch_log_settings (#567) (fc0b0e3)
• specs: Create spec, tests and examples for panos_iptag_log_settings (#569) (499fe8a)
• specs: Create spec, tests and examples for panos_syslog_profile (#565) (24ad69b)
• specs: Create spec, tests and examples for panos_system_log_settings (#561) (1545bb4)
• specs: Create spec, tests and examples for panos_userid_log_settings (#562) (b1d4939)
• specs: New spec, tests and examples for panos_bgp_auth_routing_profile (#621) (aaa0197)

2.0.5 (2025-09-03)

Bug Fixes

• terraform: Handle position attribute within lifecycle.ignore_changes (8351af4)
• terraform: properly handle update of security rules when some entries are missing from the server (3813a6f)

2.0.4 (2025-07-24)

Bug Fixes

• specs: update specs that use device-group to mark location filter variable (#544) (69dfcce)
• terraform: Handle device group hierarchy location when listing entries (#545) (68a574e)

Features

• codegen: Add MiscAttributes field to gather unprocessed XML attributes (#543) (4af0e79)

2.0.3 (2025-07-24)

Bug Fixes

• specs: add missing ngfw location to logical router (#542) (27b249a)
• specs: update panos xpath for certificate profiles (#533) (773edee)
• terraform: change nat policy variant check between floating ip and ip (#541) (de32b33)

Features

• specs: Add spec, tests and example for dhcp (#497) (ee10b98)

2.0.2 (2025-06-06)

Bug Fixes

• codegen: Fix location xpath components for panos_xpath without variables (#502) (f55cc80)
• codegen: Improve import logic for datasource-only specs (#493) (509b8b9)
• gosdk: change signature of ImportFile to accept content as []byte and set Content-Type during ExportFile (#500) (bc8fec1)
• rename PANOS_HOST to PANOS_HOSTNAME (#530) (5c5b9fd)
• specs: Add missing template-stack location to template variables (#529) (f334922)
• specs: Add missing vsys location for external dynamic lists (#496) (9f9d9e3)
• terraform: delete config resources by updating them with an empty object (#507) (dd23445)
• terraform: fix type casting panic within ephemeral resources (#528) (21fe494)
• terraform: Make sure we only import resources that have a valid import location (#505) (5715136)

Features

• codegen: Add support for child specs (#485) (812760b)
• codegen: Add support for int64 member lists (#498) (9b82894)
• codegen: Add support for more hashing types and hide them within private state (#520) (62756e3)
• codegen: Add support for overriding gosdk parameter names (#521) (b5b63c3)
• codegen: Parametrize which SDK CRUD methods are to be implemented (#492) (fedcc1b)
• codegen: Render intermediate XML structures to support empty variant lists (#486) (7ec4f0a), closes golang/go#7233
• codegen: Rewrite SDK codegen for structures, normalizers and specifiers (#483) (30a16e9)
• gosdk: Add global locks manager to serialize some operations (#494) (b7ba00b)
• specs: Add codegen spec and acceptance tests for ethernet layer3 subinterface (#488) (3d33c12)
• specs: Add codegen specs and acceptance tests for virtual router static routes resources (#487) (0f58efb)
• specs: add spec for read-only device certificates (#501) (09d538c)
• specs: Add spec, tests and examples for aggregate layer3 subinterfaces (#491) (b0f1b9a)
• specs: add spec, tests and examples for device general settings (#504) (37c290d)
• specs: Unify locations for dns and ntp specs (#503) (44d4337)

2.0.1 (2025-05-20)

Bug Fixes

• ike-gateway: Support local_address with only interface reference (#467) (d858c2a)
• specs,codegen: Add template import location for tunnel interfaces (#474) (66c4e06)
• specs: Add missing shared location for ldap profile (#489) (50b791e)
• specs: Add missing xpath_prefix component for antivirus profile (#482) (6530e75)
• terraform: Improve handling of movement edge cases around non-exhaustive resources (#470) (48b7825), closes PaloAltoNetworks/terraform-provider-panos#465
• terraform: Only validate position when attribute is known (#472) (2fac253)
• terraform: Use terraform types for position and location struct members (#469) (777f477)

Features

• codegen: Add support for multiple variant groups within single spec (#468) (35f01f6)
• specs: Add initial spec for panos_ldap_profile resource (#480) (9aacaf3)
• specs: Initial network/logical-router yaml spec (#471) (d1780cd)
• tests: Add more tests for position as variable (#473) (d580d65)

2.0.0 (2025-04-10)

Bug Fixes

• assets/pango/filtering: Update tests for empty filter case (#184) (09c17b1)
• client: Renames previous occurencies of plugin field of pango client (#175) (ade707c)
• Default log level handling in the client (#117) (cdcfe25)
• Fix provider overwriting parts of the resource that is not managed by it (#145) (30148fc)
• Fixed env var name for api key authentication (#163) (6e9d071)
• generate usable pango example (#114) (c7f6cb3)
• Make generated code compile with go 1.22 (#139) (f6fdfe0)
• Make sure that entries created during CreateMany() call are in correct order (#279) (3fcc8a6)
• properly delete and update resources during UpdateMany() (#290) (e7fd331)
• Properly handle empty plural resources (#291) (9c75c87)
• Properly initialize an expected order of entries when generating movement actions (#449) (bef98af)
• Properly pass updated position from Terraform to SDK (#446) (ec01122)
• specs/schema: Add missing name property in terraform overrides (#181) (1f4e1d5)
• specs/security-policy-rule: Drop unused locations variable (#174) (3a69e53)
• specs: Fix panos_external_dynamic_policy xpath and mark some attributes as encrypted (#432) (875cf48)
• specs: Make security policy destination zones a list (#417) (cdd5af3)
• specs: Remove default value from url_filtering_sec_profile variants (#419) (f28ddf3)
• specs: Update antivirus profile path (#285) (d470c67)
• specs: Update file blocking security profile (#284) (128617a)
• Support rendering of spec lists as unordered sets (#431) (9ba0d5a)
• tests: Establish terraform dependencies between resources (#281) (fb89184)
• tests: Fix panos_ipsec_crypto_profile acceptance tests (#282) (e2afe57)
• tests: Fix panos_tunnel_interface acceptance tests (#283) (2b2ab8e)
• Update pango example to match with current SDK (#178) (8af3034)
• Update resource names (#162) (ad3ec23)

Features

• acc_test: Adds acceptance testing primitives (#158) (73cfe3f)
• Add full rendering for terraform resources and data sources (#106) (70807b2), closes #118 #120
• add golangci-lint configuration with pre-commit hooks to lint code (#116) (96509aa)
• Add import support for ethernet and add additional specs (#130) (dfa889a), closes #135 #136
• Add NAT policy specification (#173) (dc9e7af)
• Add new functions for entries with UUID, fix problem with log-end in security policy rule, remove custom MarshalXML for config (#63) (9cae942)
• Add schema validation for variants (#152) (8dc803f)
• Add support for ephemeral resources and implement panos_api_key (#422) (eb0a4c9)
• Add support for importing plural resources (#444) (696d894)
• Add support for importing resources with positions (#458) (6577dbe)
• Adjustment of types and utilising default values in specs (#108) (2fe98de)
• Basic VR and Ethernet interface (#96) (cc09bc2)
• certificate-profile: Initial panos_certificate_profile codegen spec (#423) (3840ccf)
• codegen: Make code generation reproducible (#453) (8a7ac6d)
• Copy static files (assets) (#29) (ab72553)
• create address_value terraform provider function (#154) (ef492d8)
• Defer retrieval of system info and plugin data (#169) (744f93d)
• docs: Add more self-contained examples for resources (#448) (3410ab8)
• E2E example with static files required to execute it (#46) (f4e4c00)
• Extend existing specs and example to configure resources in Panorama templates and device groups (#100) (357b401)
• Extend locations for specs (#103) (6c02349)
• Extend PR pipeline to generate files in GitHub Actions (#36) (4e52c36)
• Extend service template (#50) (d5efaa8)
• Extend support for device groups specification (#137) (1b483a1)
• Generate descriptions for "entry names", lists and maps (#147) (ed51a4b)
• Introduce ephemeral_auth_key resource (#438) (e4a2d8d)
• Introduce log and refactor logic of cmd (#18) (ec26a4a)
• Introduce slog based logging interface (#113) (1ea8a89)
• Logging (e.g. raw XML request, XML reply from PAN-OS API) (#105) (630cb8d)
• Make MultiConfig batch size configurable (#460) (634d161)
• More updates to the Ethernet interface Layer3 spec (#138) (ad8675f)
• New movement implementation (#123) (1a0acf5)
• Normalised specifications of configuration settings (#14) (f19e57b)
• Parse normalised specifications (#17) (813a4d9)
• Refactor service template add new functions supporting UUID (#53) (81cd33f)
• refactor to apply dry (#33) (5a18280)
• Render config.go (first stage) and improvements in rendering entry.go (#35) (49457a5)
• Render entry.go (first stage) (#31) (cdb02a7)
• Render entry.go (second stage) (#34) (25ec702)
• Render location.go (#25) (65727a4)
• Render service.go for entry and config (#42) (ba3131c)
• Render files from templates (first step) (#21) (b40e3b4)
• render provider file skeleton (#64) (6befe3b), closes #58
• render resource first part (#99) (f43efad)
• Replace hand-written specs with autogenerated specs (#186) (761708c)
• Shared Terraform Provider CRUD functions (#140) (b8f07e1)
• Spec files (mgmt profile, zone, loopback) and improvements in rendering for params with embedded entry (#94) (7b9a656)
• spec: Adds SSL/TLS service profile codegen specs (#425) (051e50d)
• specs: Adds SSL decrypt configuration specs (#421) (b5a288e)
• specs: batch update yaml specs to pull xml schema parser changes (#441) (b082b83)
• specs: Generate singular variant for panos_address resource (#426) (4e30007)
• specs: Initial panos_aggregate_interface codegen spec (#251) (723ca76)
• specs: Initial panos_anti_spyware_security_profile codegen spec (#210) (e8a350b)
• specs: Initial panos_antivirus_profile codegen spec (#182) (e80c499)
• specs: Initial panos_application codegen spec (#377) (c73632c)
• specs: Initial panos_application_group codegen spec (#378) (6414d88)
• specs: Initial panos_dynamic_updates codegen spec (#261) (2a7ddc9)
• specs: Initial panos_ethernet_layer3_subinterface spec (#277) (5ccd980)
• specs: Initial panos_file_blocking_profile codegen spec (#241) (af62ae2)
• specs: Initial panos_ike_crypto_profile codegen spec (#255) (04e3578)
• specs: Initial panos_ike_gateway codegen spec (#259) (b0538d1)
• specs: Initial panos_ipsec_crypto_profile codegen spec (#257) (4993359)
• specs: Initial panos_log_forwarding codegen spec (#235) (478edb3)
• specs: Initial panos_loopback_interface codegen spec (#253) (bd45d6d)
• specs: Initial panos_security_profile_group codegen spec (#236) (8c2ad93)
• specs: Initial panos_tunnel_interface codegen spec (#249) (61b60b6)
• specs: Initial panos_url_filtering_security_profile codegen spec (#243) (f6770f6)
• specs: Initial panos_vlan codegen spec (#269) (63e8887)
• specs: Initial panos_vlan_interface codegen spec (#247) (8ca07de)
• specs: Initial panos_vulnerability_security_profile codegen spec (#245) (32f925b)
• specs: Initial panos_wildfire_analysis_profile codegen spec (#239) (ef48836)
• specs: Initial resource_admin_role spec (#234) (dba168c)
• specs: IPSec Tunnels - Codegen spec (#199) (7313292)
• specs: Mark policy resource uuid attributes as private (#445) (478b674)
• Support for tag colors (#47) (d7d0d9f)
• Support importable resources (#104) (02c1fa1)
• tests: Add panos_application acceptance tests (#379) (b277bad)
• tests: Add panos_security_profile_group terraform tests (#416) (0fcb612)
• tests: Add panos_url_filtering_security_profile terraform tests (#418) (6feccd8)
• tests: Add panos_vulnerability_security_profile terraform tests (#420) (4e11ca0)
• tests: Initial panos_admin_role terraform acceptance tests (#266) (edf193d)
• tests: Initial panos_aggregate_interface acceptance tests (#270) (1463f85)
• tests: Initial panos_application_group terraform tests (#415) (ef62677)
• tests: Initial panos_dynamic_update terraform acceptance tests (#264) (ad237ba)
• tests: Initial panos_ike_crypto_profile acceptance tests (#274) (cf6401c)
• tests: Initial panos_ipsec_crypto_profile acceptance tests (#275) (7f04749)
• tests: Initial panos_log_forwarding_profile terraform acceptance tests (#265) (9f09f11)
• tests: Initial panos_vlan_interface acceptance tests (#273) (ac3f8a3)
• tests: Initial panos_zone terraform tests (#328) (98837c2)
• Unify location types, making a shared location an (optionally) empty object (#461) (caa16a1)
• Update golangci-lint used in CI to 1.60 (#134) (373b796)
• update schema specification with JSON schema validation (#122) (e3f2124)