(Phase 0): v4->v5 zero_trust_access_application (#52)

* ci: migrate e2e runner to Go

* v4->v5 zero_trust_access_application

# Conflicts:
#	integration/v4_to_v5/integration_test.go
#	internal/registry/registry.go

* WIP: Empty value -> Default transformations (Integration tests failing)

* feat(zero_trust_access_application): v4 to v5 migration

* feat(zero_trust_access_policy): v4 to v5 migration

---------

Co-authored-by: Tamas Jozsa <[email protected]>
Co-authored-by: cortlyons <[email protected]>

Author: 3 people

e2e/drift-exemptions.yaml

@@ -20,6 +20,39 @@ exemptions:
       - 'status.*->.*"active"'
     enabled: true
 
+  # Ignore empty nested objects being normalized to null in access policy condition elements
+  - name: "access_policy_empty_objects_to_null"
+    description: "Empty nested objects in condition elements normalized to null (terraform init behavior)"
+    resource_types:
+      - "cloudflare_zero_trust_access_policy"
+    patterns:
+      - '= \{\} -> null'
+    enabled: true
+
+  # Ignore nested object restructuring in access policy condition elements
+  - name: "access_policy_nested_object_restructuring"
+    description: "Nested objects in condition elements being restructured (empty object removal)"
+    resource_types:
+      - "cloudflare_zero_trust_access_policy"
+    patterns:
+      - '\+ email = \{'
+      - '- email\s+= \{'
+      - '\+ email_domain = \{'
+      - '- email_domain = \{'
+      - '\+ ip = \{'
+      - '- ip\s+= \{'
+      - '\+ geo = \{'
+      - '- geo\s+= \{'
+      - '- email = .* -> null'
+      - '\+ email = '
+      - '- domain = .* -> null'
+      - '\+ domain = '
+      - '- ip = .* -> null'
+      - '\+ ip = '
+      - '- country_code = .* -> null'
+      - '\+ country_code = '
+    enabled: true
+
   # Example: Ignore specific resource types
   # - name: "zone_dnssec_computed"
   #   description: "Ignore computed changes in zone DNSSEC resources"

integration/v4_to_v5/integration_test.go

@@ -13,20 +13,22 @@ import (
 	_ "github.com/cloudflare/tf-migrate/internal/resources/dns_record"
 	_ "github.com/cloudflare/tf-migrate/internal/resources/healthcheck"
 	_ "github.com/cloudflare/tf-migrate/internal/resources/logpull_retention"
-	_ "github.com/cloudflare/tf-migrate/internal/resources/page_rule"
 	_ "github.com/cloudflare/tf-migrate/internal/resources/managed_transforms"
+	_ "github.com/cloudflare/tf-migrate/internal/resources/page_rule"
 	_ "github.com/cloudflare/tf-migrate/internal/resources/pages_project"
 	_ "github.com/cloudflare/tf-migrate/internal/resources/r2_bucket"
 	_ "github.com/cloudflare/tf-migrate/internal/resources/regional_hostname"
-	_ "github.com/cloudflare/tf-migrate/internal/resources/tiered_cache"
 	_ "github.com/cloudflare/tf-migrate/internal/resources/spectrum_application"
+	_ "github.com/cloudflare/tf-migrate/internal/resources/tiered_cache"
 	_ "github.com/cloudflare/tf-migrate/internal/resources/url_normalization_settings"
 	_ "github.com/cloudflare/tf-migrate/internal/resources/workers_kv"
 	_ "github.com/cloudflare/tf-migrate/internal/resources/workers_kv_namespace"
+	_ "github.com/cloudflare/tf-migrate/internal/resources/zero_trust_access_application"
 	_ "github.com/cloudflare/tf-migrate/internal/resources/workers_script"
 	_ "github.com/cloudflare/tf-migrate/internal/resources/zero_trust_access_group"
-	_ "github.com/cloudflare/tf-migrate/internal/resources/zero_trust_access_service_token"
 	_ "github.com/cloudflare/tf-migrate/internal/resources/zero_trust_access_identity_provider"
+	_ "github.com/cloudflare/tf-migrate/internal/resources/zero_trust_access_policy"
+	_ "github.com/cloudflare/tf-migrate/internal/resources/zero_trust_access_service_token"
 	_ "github.com/cloudflare/tf-migrate/internal/resources/zero_trust_dlp_custom_profile"
 	_ "github.com/cloudflare/tf-migrate/internal/resources/zero_trust_gateway_policy"
 	_ "github.com/cloudflare/tf-migrate/internal/resources/zero_trust_list"