-
Notifications
You must be signed in to change notification settings - Fork 5
chore(deps): update terraform azurerm to v4.58.0 #733
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
Code Review Feedback1. Consistency in Version Pinning
2. Provider Block Validation
3. Gentle Upgrade Path
4. Terraform Block Version
5. Update Testing Plan
6. Carbon and Cost Implications
7. Lock Provider Versions
By addressing these points, you’ll improve maintainability, reduce risks associated with version upgrades, and ensure alignment with Terraform best practices. |
Plan Result (766: Genesis_sbox - Genesis)
Change Result (Click me) # module.genesis.azurerm_resource_group.genesis_resource_group will be updated in-place
~ resource "azurerm_resource_group" "genesis_resource_group" {
id = "/subscriptions/b72ab7b7-723f-4b18-b6f6-03b0f2c6a1bb/resourceGroups/genesis-rg"
name = "genesis-rg"
~ tags = {
+ "application" = "core"
+ "builtFrom" = "hmcts/aks-cft-deploy"
+ "businessArea" = "CFT"
+ "criticality" = "Low"
+ "environment" = "sandbox"
+ "expiresAfter" = "3000-01-01"
}
# (2 unchanged attributes hidden)
}
Plan: 0 to add, 1 to change, 0 to destroy. |
Plan Result (766: Network_sbox - NetworkRg) |
Plan Result (766: Aks_sbox - DeployInfrastructure)
Change Result (Click me) # azurerm_resource_group.disks_resource_group will be created
+ resource "azurerm_resource_group" "disks_resource_group" {
+ id = (known after apply)
+ location = "uksouth"
+ name = "disks-sbox-rg"
+ tags = {
+ "application" = "core"
+ "autoShutdown" = "true"
+ "builtFrom" = "hmcts/aks-cft-deploy"
+ "businessArea" = "CFT"
+ "criticality" = "Low"
+ "environment" = "sandbox"
+ "expiresAfter" = "3000-01-01"
}
}
# azurerm_role_assignment.disk will be created
+ resource "azurerm_role_assignment" "disk" {
+ condition_version = (known after apply)
+ id = (known after apply)
+ name = (known after apply)
+ principal_id = "ff47ab8f-e4d9-48f2-ad31-af5933824849"
+ principal_type = (known after apply)
+ role_definition_id = (known after apply)
+ role_definition_name = "Virtual Machine Contributor"
+ scope = (known after apply)
+ skip_service_principal_aad_check = (known after apply)
}
# module.kubernetes["00"].azurerm_kubernetes_cluster.kubernetes_cluster will be updated in-place
~ resource "azurerm_kubernetes_cluster" "kubernetes_cluster" {
id = "/subscriptions/b72ab7b7-723f-4b18-b6f6-03b0f2c6a1bb/resourceGroups/cft-sbox-00-rg/providers/Microsoft.ContainerService/managedClusters/cft-sbox-00-aks"
~ image_cleaner_enabled = true -> false
- image_cleaner_interval_hours = 24 -> null
~ kubernetes_version = "1.33.3" -> "1.32"
name = "cft-sbox-00-aks"
~ run_command_enabled = false -> true
tags = {
"application" = "core"
"autoShutdown" = "true"
"builtFrom" = "hmcts/aks-cft-deploy"
"businessArea" = "CFT"
"criticality" = "Low"
"environment" = "sandbox"
"expiresAfter" = "3000-01-01"
}
# (35 unchanged attributes hidden)
~ default_node_pool {
name = "system"
~ orchestrator_version = "1.33.3" -> "1.32"
tags = {
"application" = "core"
"autoShutdown" = "true"
"builtFrom" = "hmcts/aks-cft-deploy"
"businessArea" = "CFT"
"criticality" = "Low"
"environment" = "sandbox"
"expiresAfter" = "3000-01-01"
}
# (30 unchanged attributes hidden)
# (1 unchanged block hidden)
}
- upgrade_override {
- effective_until = "2025-10-23T23:59:59Z" -> null
- force_upgrade_enabled = true -> null
}
# (10 unchanged blocks hidden)
}
# module.kubernetes["00"].azurerm_kubernetes_cluster_node_pool.additional_node_pools["cronjob"] will be updated in-place
~ resource "azurerm_kubernetes_cluster_node_pool" "additional_node_pools" {
id = "/subscriptions/b72ab7b7-723f-4b18-b6f6-03b0f2c6a1bb/resourceGroups/cft-sbox-00-rg/providers/Microsoft.ContainerService/managedClusters/cft-sbox-00-aks/agentPools/cronjob"
name = "cronjob"
~ orchestrator_version = "1.33.3" -> "1.32"
tags = {
"application" = "core"
"autoShutdown" = "true"
"builtFrom" = "hmcts/aks-cft-deploy"
"businessArea" = "CFT"
"criticality" = "Low"
"environment" = "sandbox"
"expiresAfter" = "3000-01-01"
}
# (30 unchanged attributes hidden)
# (2 unchanged blocks hidden)
}
# module.kubernetes["00"].azurerm_kubernetes_cluster_node_pool.additional_node_pools["linux"] will be updated in-place
~ resource "azurerm_kubernetes_cluster_node_pool" "additional_node_pools" {
id = "/subscriptions/b72ab7b7-723f-4b18-b6f6-03b0f2c6a1bb/resourceGroups/cft-sbox-00-rg/providers/Microsoft.ContainerService/managedClusters/cft-sbox-00-aks/agentPools/linux"
name = "linux"
~ orchestrator_version = "1.33.3" -> "1.32"
tags = {
"application" = "core"
"autoShutdown" = "true"
"builtFrom" = "hmcts/aks-cft-deploy"
"businessArea" = "CFT"
"criticality" = "Low"
"environment" = "sandbox"
"expiresAfter" = "3000-01-01"
}
# (30 unchanged attributes hidden)
# (2 unchanged blocks hidden)
}
# module.kubernetes["01"].azurerm_kubernetes_cluster.kubernetes_cluster will be updated in-place
~ resource "azurerm_kubernetes_cluster" "kubernetes_cluster" {
id = "/subscriptions/b72ab7b7-723f-4b18-b6f6-03b0f2c6a1bb/resourceGroups/cft-sbox-01-rg/providers/Microsoft.ContainerService/managedClusters/cft-sbox-01-aks"
name = "cft-sbox-01-aks"
tags = {
"application" = "core"
"autoShutdown" = "true"
"builtFrom" = "hmcts/aks-cft-deploy"
"businessArea" = "CFT"
"criticality" = "Low"
"environment" = "sandbox"
"expiresAfter" = "3000-01-01"
}
# (39 unchanged attributes hidden)
- upgrade_override {
- force_upgrade_enabled = false -> null
# (1 unchanged attribute hidden)
}
# (11 unchanged blocks hidden)
}
Plan: 2 to add, 4 to change, 0 to destroy.ℹ️ Objects have changed outside of TerraformThis feature was introduced from Terraform v0.15.4. Terraform detected the following changes made outside of Terraform since the
last "terraform apply" which may have affected this plan:
# azurerm_resource_group.disks_resource_group has been deleted
- resource "azurerm_resource_group" "disks_resource_group" {
- id = "/subscriptions/b72ab7b7-723f-4b18-b6f6-03b0f2c6a1bb/resourceGroups/disks-sbox-rg" -> null
name = "disks-sbox-rg"
tags = {
"application" = "core"
"autoShutdown" = "true"
"builtFrom" = "hmcts/aks-cft-deploy"
"businessArea" = "CFT"
"criticality" = "Low"
"environment" = "sandbox"
"expiresAfter" = "3000-01-01"
}
# (2 unchanged attributes hidden)
}
Unless you have made equivalent changes to your configuration, or ignored the |
Plan Result (766: Aks_sbox - DeployInfrastructuremis) |
Plan Result (766: Aks_ithc - DeployInfrastructure)
Change Result (Click me) # azurerm_resource_group.disks_resource_group will be created
+ resource "azurerm_resource_group" "disks_resource_group" {
+ id = (known after apply)
+ location = "uksouth"
+ name = "disks-ithc-rg"
+ tags = {
+ "application" = "core"
+ "autoShutdown" = "true"
+ "builtFrom" = "hmcts/aks-cft-deploy"
+ "businessArea" = "CFT"
+ "criticality" = "Medium"
+ "environment" = "ithc"
}
}
# azurerm_role_assignment.disk will be created
+ resource "azurerm_role_assignment" "disk" {
+ condition_version = (known after apply)
+ id = (known after apply)
+ name = (known after apply)
+ principal_id = "fcf1fd52-1e62-4827-b8f7-7088bc9dd488"
+ principal_type = (known after apply)
+ role_definition_id = (known after apply)
+ role_definition_name = "Virtual Machine Contributor"
+ scope = (known after apply)
+ skip_service_principal_aad_check = (known after apply)
}
# module.kubernetes["00"].azurerm_kubernetes_cluster.kubernetes_cluster will be updated in-place
~ resource "azurerm_kubernetes_cluster" "kubernetes_cluster" {
id = "/subscriptions/62864d44-5da9-4ae9-89e7-0cf33942fa09/resourceGroups/cft-ithc-00-rg/providers/Microsoft.ContainerService/managedClusters/cft-ithc-00-aks"
name = "cft-ithc-00-aks"
tags = {
"application" = "core"
"autoShutdown" = "true"
"builtFrom" = "hmcts/aks-cft-deploy"
"businessArea" = "CFT"
"criticality" = "Medium"
"environment" = "ithc"
}
# (39 unchanged attributes hidden)
- upgrade_override {
- force_upgrade_enabled = false -> null
# (1 unchanged attribute hidden)
}
# (11 unchanged blocks hidden)
}
Plan: 2 to add, 1 to change, 0 to destroy.ℹ️ Objects have changed outside of TerraformThis feature was introduced from Terraform v0.15.4. Terraform detected the following changes made outside of Terraform since the
last "terraform apply" which may have affected this plan:
# azurerm_resource_group.disks_resource_group has been deleted
- resource "azurerm_resource_group" "disks_resource_group" {
- id = "/subscriptions/62864d44-5da9-4ae9-89e7-0cf33942fa09/resourceGroups/disks-ithc-rg" -> null
name = "disks-ithc-rg"
tags = {
"application" = "core"
"autoShutdown" = "true"
"builtFrom" = "hmcts/aks-cft-deploy"
"businessArea" = "CFT"
"criticality" = "Medium"
"environment" = "ithc"
}
# (2 unchanged attributes hidden)
}
Unless you have made equivalent changes to your configuration, or ignored the |
Plan Result (766: Aks_ptlsbox - DeployInfrastructure)
Change Result (Click me) # module.kubernetes["00"].azurerm_kubernetes_cluster.kubernetes_cluster will be updated in-place
~ resource "azurerm_kubernetes_cluster" "kubernetes_cluster" {
id = "/subscriptions/1497c3d7-ab6d-4bb7-8a10-b51d03189ee3/resourceGroups/cft-ptlsbox-00-rg/providers/Microsoft.ContainerService/managedClusters/cft-ptlsbox-00-aks"
name = "cft-ptlsbox-00-aks"
tags = {
"application" = "core"
"autoShutdown" = "true"
"builtFrom" = "hmcts/aks-cft-deploy"
"businessArea" = "CFT"
"criticality" = "Low"
"environment" = "sandbox"
"expiresAfter" = "3000-01-01"
}
# (39 unchanged attributes hidden)
- upgrade_override {
- force_upgrade_enabled = false -> null
# (1 unchanged attribute hidden)
}
# (11 unchanged blocks hidden)
}
Plan: 0 to add, 1 to change, 0 to destroy.
|
Plan Result (766: Aks_demo - DeployInfrastructure)
Change Result (Click me) # azurerm_resource_group.disks_resource_group will be created
+ resource "azurerm_resource_group" "disks_resource_group" {
+ id = (known after apply)
+ location = "uksouth"
+ name = "disks-demo-rg"
+ tags = {
+ "application" = "core"
+ "autoShutdown" = "true"
+ "builtFrom" = "hmcts/aks-cft-deploy"
+ "businessArea" = "CFT"
+ "criticality" = "Medium"
+ "environment" = "demo"
}
}
# azurerm_role_assignment.disk will be created
+ resource "azurerm_role_assignment" "disk" {
+ condition_version = (known after apply)
+ id = (known after apply)
+ name = (known after apply)
+ principal_id = "a16e4c77-50e4-467f-9a3f-6b5f809b271d"
+ principal_type = (known after apply)
+ role_definition_id = (known after apply)
+ role_definition_name = "Virtual Machine Contributor"
+ scope = (known after apply)
+ skip_service_principal_aad_check = (known after apply)
}
# module.kubernetes["00"].azurerm_kubernetes_cluster.kubernetes_cluster will be updated in-place
~ resource "azurerm_kubernetes_cluster" "kubernetes_cluster" {
id = "/subscriptions/d025fece-ce99-4df2-b7a9-b649d3ff2060/resourceGroups/cft-demo-00-rg/providers/Microsoft.ContainerService/managedClusters/cft-demo-00-aks"
name = "cft-demo-00-aks"
tags = {
"application" = "core"
"autoShutdown" = "true"
"builtFrom" = "hmcts/aks-cft-deploy"
"businessArea" = "CFT"
"criticality" = "Medium"
"environment" = "demo"
}
# (39 unchanged attributes hidden)
- upgrade_override {
- force_upgrade_enabled = false -> null
# (1 unchanged attribute hidden)
}
# (11 unchanged blocks hidden)
}
# module.kubernetes["01"].azurerm_kubernetes_cluster.kubernetes_cluster will be updated in-place
~ resource "azurerm_kubernetes_cluster" "kubernetes_cluster" {
id = "/subscriptions/d025fece-ce99-4df2-b7a9-b649d3ff2060/resourceGroups/cft-demo-01-rg/providers/Microsoft.ContainerService/managedClusters/cft-demo-01-aks"
name = "cft-demo-01-aks"
tags = {
"application" = "core"
"autoShutdown" = "true"
"builtFrom" = "hmcts/aks-cft-deploy"
"businessArea" = "CFT"
"criticality" = "Medium"
"environment" = "demo"
}
# (39 unchanged attributes hidden)
- upgrade_override {
- force_upgrade_enabled = false -> null
# (1 unchanged attribute hidden)
}
# (11 unchanged blocks hidden)
}
Plan: 2 to add, 2 to change, 0 to destroy.ℹ️ Objects have changed outside of TerraformThis feature was introduced from Terraform v0.15.4. Terraform detected the following changes made outside of Terraform since the
last "terraform apply" which may have affected this plan:
# azurerm_resource_group.disks_resource_group has been deleted
- resource "azurerm_resource_group" "disks_resource_group" {
- id = "/subscriptions/d025fece-ce99-4df2-b7a9-b649d3ff2060/resourceGroups/disks-demo-rg" -> null
name = "disks-demo-rg"
tags = {
"application" = "core"
"autoShutdown" = "true"
"builtFrom" = "hmcts/aks-cft-deploy"
"businessArea" = "CFT"
"criticality" = "Medium"
"environment" = "demo"
}
# (2 unchanged attributes hidden)
}
Unless you have made equivalent changes to your configuration, or ignored the |
Plan Result (766: Aks_perftest - DeployInfrastructure)
Change Result (Click me) # azurerm_resource_group.disks_resource_group will be created
+ resource "azurerm_resource_group" "disks_resource_group" {
+ id = (known after apply)
+ location = "uksouth"
+ name = "disks-perftest-rg"
+ tags = {
+ "application" = "core"
+ "autoShutdown" = "true"
+ "builtFrom" = "hmcts/aks-cft-deploy"
+ "businessArea" = "CFT"
+ "criticality" = "Medium"
+ "environment" = "testing"
}
}
# azurerm_role_assignment.disk will be created
+ resource "azurerm_role_assignment" "disk" {
+ condition_version = (known after apply)
+ id = (known after apply)
+ name = (known after apply)
+ principal_id = "396e0bf7-3416-4f89-b2f3-a2dfc9c53fa2"
+ principal_type = (known after apply)
+ role_definition_id = (known after apply)
+ role_definition_name = "Virtual Machine Contributor"
+ scope = (known after apply)
+ skip_service_principal_aad_check = (known after apply)
}
# module.kubernetes["00"].azurerm_kubernetes_cluster.kubernetes_cluster will be updated in-place
~ resource "azurerm_kubernetes_cluster" "kubernetes_cluster" {
id = "/subscriptions/8a07fdcd-6abd-48b3-ad88-ff737a4b9e3c/resourceGroups/cft-perftest-00-rg/providers/Microsoft.ContainerService/managedClusters/cft-perftest-00-aks"
name = "cft-perftest-00-aks"
tags = {
"application" = "core"
"autoShutdown" = "true"
"builtFrom" = "hmcts/aks-cft-deploy"
"businessArea" = "CFT"
"criticality" = "Medium"
"environment" = "testing"
}
# (39 unchanged attributes hidden)
- upgrade_override {
- force_upgrade_enabled = false -> null
# (1 unchanged attribute hidden)
}
# (12 unchanged blocks hidden)
}
# module.kubernetes["01"].azurerm_kubernetes_cluster.kubernetes_cluster will be updated in-place
~ resource "azurerm_kubernetes_cluster" "kubernetes_cluster" {
id = "/subscriptions/8a07fdcd-6abd-48b3-ad88-ff737a4b9e3c/resourceGroups/cft-perftest-01-rg/providers/Microsoft.ContainerService/managedClusters/cft-perftest-01-aks"
name = "cft-perftest-01-aks"
tags = {
"application" = "core"
"autoShutdown" = "true"
"builtFrom" = "hmcts/aks-cft-deploy"
"businessArea" = "CFT"
"criticality" = "Medium"
"environment" = "testing"
}
# (39 unchanged attributes hidden)
- upgrade_override {
- force_upgrade_enabled = false -> null
# (1 unchanged attribute hidden)
}
# (12 unchanged blocks hidden)
}
Plan: 2 to add, 2 to change, 0 to destroy.ℹ️ Objects have changed outside of TerraformThis feature was introduced from Terraform v0.15.4. Terraform detected the following changes made outside of Terraform since the
last "terraform apply" which may have affected this plan:
# azurerm_resource_group.disks_resource_group has been deleted
- resource "azurerm_resource_group" "disks_resource_group" {
- id = "/subscriptions/8a07fdcd-6abd-48b3-ad88-ff737a4b9e3c/resourceGroups/disks-perftest-rg" -> null
name = "disks-perftest-rg"
tags = {
"application" = "core"
"autoShutdown" = "true"
"builtFrom" = "hmcts/aks-cft-deploy"
"businessArea" = "CFT"
"criticality" = "Medium"
"environment" = "testing"
}
# (2 unchanged attributes hidden)
}
Unless you have made equivalent changes to your configuration, or ignored the
|
Plan Result (766: Aks_aat - DeployInfrastructure)
Change Result (Click me) # module.kubernetes["00"].azurerm_kubernetes_cluster.kubernetes_cluster will be updated in-place
~ resource "azurerm_kubernetes_cluster" "kubernetes_cluster" {
id = "/subscriptions/96c274ce-846d-4e48-89a7-d528432298a7/resourceGroups/cft-aat-00-rg/providers/Microsoft.ContainerService/managedClusters/cft-aat-00-aks"
name = "cft-aat-00-aks"
tags = {
"application" = "core"
"autoShutdown" = "true"
"builtFrom" = "hmcts/aks-cft-deploy"
"businessArea" = "CFT"
"criticality" = "High"
"environment" = "staging"
}
# (39 unchanged attributes hidden)
- upgrade_override {
- force_upgrade_enabled = false -> null
# (1 unchanged attribute hidden)
}
# (11 unchanged blocks hidden)
}
# module.kubernetes["01"].azurerm_kubernetes_cluster.kubernetes_cluster will be updated in-place
~ resource "azurerm_kubernetes_cluster" "kubernetes_cluster" {
id = "/subscriptions/96c274ce-846d-4e48-89a7-d528432298a7/resourceGroups/cft-aat-01-rg/providers/Microsoft.ContainerService/managedClusters/cft-aat-01-aks"
name = "cft-aat-01-aks"
tags = {
"application" = "core"
"autoShutdown" = "true"
"builtFrom" = "hmcts/aks-cft-deploy"
"businessArea" = "CFT"
"criticality" = "High"
"environment" = "staging"
}
# (39 unchanged attributes hidden)
- upgrade_override {
- force_upgrade_enabled = false -> null
# (1 unchanged attribute hidden)
}
# (11 unchanged blocks hidden)
}
Plan: 0 to add, 2 to change, 0 to destroy. |
Plan Result (766: Aks_preview - DeployInfrastructure)
Change Result (Click me) # azurerm_resource_group.disks_resource_group will be created
+ resource "azurerm_resource_group" "disks_resource_group" {
+ id = (known after apply)
+ location = "uksouth"
+ name = "disks-preview-rg"
+ tags = {
+ "application" = "core"
+ "autoShutdown" = "true"
+ "builtFrom" = "hmcts/aks-cft-deploy"
+ "businessArea" = "CFT"
+ "criticality" = "Low"
+ "environment" = "development"
}
}
# azurerm_role_assignment.disk will be created
+ resource "azurerm_role_assignment" "disk" {
+ condition_version = (known after apply)
+ id = (known after apply)
+ name = (known after apply)
+ principal_id = "916381c3-3565-4fa9-80bc-1e7754942106"
+ principal_type = (known after apply)
+ role_definition_id = (known after apply)
+ role_definition_name = "Virtual Machine Contributor"
+ scope = (known after apply)
+ skip_service_principal_aad_check = (known after apply)
}
# module.kubernetes["01"].azurerm_kubernetes_cluster.kubernetes_cluster will be updated in-place
~ resource "azurerm_kubernetes_cluster" "kubernetes_cluster" {
id = "/subscriptions/8b6ea922-0862-443e-af15-6056e1c9b9a4/resourceGroups/cft-preview-01-rg/providers/Microsoft.ContainerService/managedClusters/cft-preview-01-aks"
name = "cft-preview-01-aks"
tags = {
"application" = "core"
"autoShutdown" = "true"
"builtFrom" = "hmcts/aks-cft-deploy"
"businessArea" = "CFT"
"criticality" = "Low"
"environment" = "development"
}
# (39 unchanged attributes hidden)
- upgrade_override {
- force_upgrade_enabled = false -> null
# (1 unchanged attribute hidden)
}
# (11 unchanged blocks hidden)
}
Plan: 2 to add, 1 to change, 0 to destroy.ℹ️ Objects have changed outside of TerraformThis feature was introduced from Terraform v0.15.4. Terraform detected the following changes made outside of Terraform since the
last "terraform apply" which may have affected this plan:
# azurerm_resource_group.disks_resource_group has been deleted
- resource "azurerm_resource_group" "disks_resource_group" {
- id = "/subscriptions/8b6ea922-0862-443e-af15-6056e1c9b9a4/resourceGroups/disks-preview-rg" -> null
name = "disks-preview-rg"
tags = {
"application" = "core"
"autoShutdown" = "true"
"builtFrom" = "hmcts/aks-cft-deploy"
"businessArea" = "CFT"
"criticality" = "Low"
"environment" = "development"
}
# (2 unchanged attributes hidden)
}
Unless you have made equivalent changes to your configuration, or ignored the
|
Plan Result (766: Aks_ithc - DeployInfrastructuremis) |
Plan Result (766: Aks_demo - DeployInfrastructuremis) |
Code Review Suggestions:
Summary Table:
|
494ec22 to
daae88a
Compare
Feedback and Improvement Suggestions
By centralizing version management, adopting a version range, and ensuring thorough testing, this upgrade can be made more efficient and maintainable over time. |
daae88a to
7d117d1
Compare
Observations and Suggestions for Improvement
By addressing these improvements, the implementation will be more robust, maintainable, and aligned with best practices. |
7d117d1 to
575b434
Compare
575b434 to
ba31da1
Compare
ba31da1 to
dd0fe3f
Compare
cbc785e to
856b87b
Compare
856b87b to
66744c5
Compare
66744c5 to
995f21d
Compare
995f21d to
c7f5447
Compare
c7f5447 to
83b03f3
Compare
83b03f3 to
5972bb0
Compare
5972bb0 to
6cf85c5
Compare
This PR contains the following updates:
4.51.0→4.58.04.9.0→4.58.0Release Notes
hashicorp/terraform-provider-azurerm (azurerm)
v4.58.0Compare Source
FEATURES:
azurerm_network_security_perimeter(#31356)azurerm_network_security_perimeter_profile(#31356)azurerm_network_security_perimeter(#31356)azurerm_network_security_perimeter_access_rule(#31356)azurerm_network_security_perimeter_association(#31356)azurerm_network_security_perimeter_profile(#31356)azurerm_resource_group(#31270)ENHANCEMENTS:
go-azure-sdk- update tov0.20251219.1184026(#31397)azurerm_backup_policy_file_share- add support forbackup_tierandsnapshot_retention_in_days(#29243)azurerm_cosmosdb_cassandra_cluster-versionnow supports4.1and5.0(#31424)azurerm_function_app_flex_consumption- themaximum_instance_countproperty now allows values from1-1000(#31392)azurerm_kubernetes_cluster-network_data_planeandnetwork_policynow support updating tocilium(#30958)azurerm_kusto_eventhub_data_connection- add support forretrieval_start_date(#31445)azurerm_kusto_iothub_data_connection- add support forretrieval_start_date(#31413)azurerm_kusto_script- add support forscript_levelandprincipal_permissions_action(#31403)azurerm_linux_function_app- add support for24tosite_config.application_stack.node_version(#31098)azurerm_linux_function_app_slot- add support for24tosite_config.application_stack.node_version(#31098)azurerm_linux_web_app- add support for24-ltstosite_config.application_stack.node_version(#31098)azurerm_linux_web_app_slot- add support for24-ltstosite_config.application_stack.node_version(#31098)azurerm_mssql_managed_instance- increasestorage_size_in_gbmaximum to32768(#31387)azurerm_netapp_volume_group_oracle-service_levelnow supportsFlexible(#31508)azurerm_netapp_volume_group_sap_hana-service_levelnow supportsFlexible(#31508)azurerm_network_manager_routing_configuration- add support for theroute_table_usage_modeproperty (#31463)azurerm_windows_function_app- add support for~24tosite_config.application_stack.node_version(#31248)azurerm_windows_function_app_slot- add support for~24tosite_config.application_stack.node_version(#31248)data.azurerm_container_registry-admin_passwordis now sensitive (#31428)BUG FIXES:
azurerm_api_management- fix an issue that prevented updates tohostname_configuration.*.key_vault_certificate_id(#31534)azurerm_api_management_custom_domain- fix an issue that prevented updates to[management|portal|developer_portal|scm|gateway].key_vault_certificate_id(#31534)azurerm_container_app_custom_domain- no longer error during read when container app is deleted outside of Terraform (#31523)azurerm_databricks_workspace- removed a legacy workaround that prevented apply operations from succeeding whenmanaged_disk_cmk_rotation_to_latest_version_enabledandtagswere updated simultaneously (#31509)azurerm_storage_account- can now update a Storage Standard ZRS account (#31431)clients- fix correlation id across many clients (#31368)v4.57.0Compare Source
NOTE: This release removes the Mobile Network (
azurerm_mobile_network*) resources and data sources due to Azure having retired the serviceFEATURES:
azurerm_automation_runtime_environment(#30991)ENHANCEMENTS:
azurerm_data_protection_backup_vault_customer_managed_key- thekey_vault_key_idproperty now supports keys from a Managed HSM vault (#31365)azurerm_kubernetes_cluster- support for thenode_provisioning_profileblock (#30517)azurerm_log_analytics_cluster_customer_managed_key- thekey_vault_key_idproperty now supports keys from a Managed HSM vault (#31375)azurerm_mssql_database- thetransparent_data_encryption_key_vault_key_idproperty now supports keys from a Managed HSM vault (#31373)BUG FIXES:
azurerm_data_factory- fix ID parsing errors whencustomer_managed_key_identity_idis an empty string (#28621)azurerm_eventhub-partition_countcan now be updated for dedicated clusters (#30993)azurerm_linux_function_app- fix panic when deployed without all required permissions (#31344)v4.56.0Compare Source
ENHANCEMENTS:
healthbot- update to API version2025-05-25(#31328)terraform-plugin-testing- update tov1.14.0(#31334)azurerm_cognitive_account- add support for new attributes (#30778)azurerm_cognitive_account- add support for thekindproperty to rollback or upgrade fromOpenAItoAIServices(#31063)azurerm_databricks_workspace_root_dbfs_customer_managed_key- thekey_vault_key_idproperty now supports keys from Managed HSM Vaults (#31336)azurerm_databricks_workspace_root_dbfs_customer_managed_key- thekey_vault_key_idproperty now supports versionless keys (#31336)azurerm_healthbot- add support for theC1andPESSKUs (#31328)azurerm_lbfixignore_changesbehaviour in updatable properties (#31318)azurerm_network_manager_network_group- add support for themember_typeproperty [GH-30672azurerm_network_manager_static_member- add support for using a subnet as the target resource (#30672)azurerm_virtual_network_gateway- add support for theErGwScaleSKU (#31082)BUG FIXES:
azurerm_container_app_environment_certificate- fix an issue that prevented creating the resource with an empty value forcertificate_password(#31335)azurerm_databricks_workspace_root_dbfs_customer_managed_key- fix a panic that occurred when the customer managed key was removed from the workspace outside of Terraform (#31336)azurerm_databricks_workspace_root_dbfs_customer_managed_key- fix the timeout for the delete operation (#31336)azurerm_storage_blob_inventory_policy- fix setting Resource Identity data (#31313)v4.55.0Compare Source
FEATURES:
azurerm_api_management_workspace(#30241)azurerm_cognitive_account_project(#30916)azurerm_log_analytics_workspace_table_custom_log(#30800)azurerm_mongo_cluster_user(#31205)azurerm_palo_alto_next_generation_firewall_virtual_hub_strata_cloud_manager(#30613)azurerm_palo_alto_next_generation_firewall_virtual_network_strata_cloud_manager(#30613)azurerm_private_dns_zone(#31157)ENHANCEMENTS:
containerregistry- update to API version2025-04-01(#30205)go-azure-helpers- update tov0.75.1(#31148)go-azure-sdk- update tov0.20251202.1181053(#31253)managedidentity- upgrade API version to2024-11-30(#30535)postgres- update to API version2025-08-01(#31162)azurerm_cognitive_account- update validation forcustomer_managed_key.key_vault_key_idto allow managed HSM keys as input (#31147)azurerm_container_app_environment- extend validation forworkload_profile_typefor additional supported SKUs (#30738)azurerm_container_app_environment_certificate- add support for thecertificate_key_vaultblock (#30510)azurerm_data_factory- update validation forcustomer_managed_key_idto allow managed HSM keys as input (#31146)azurerm_mongo_cluster- support for new propertiescustomer_managed_key,data_api_mode_enabled,identity,restore,authentication_methodsandstorage_type(#31100)azurerm_mysql_flexible_server- add support for MySQL version8.4(#31099)azurerm_oracle_autonomous_database- theadmin_passwordproperty is no longerForceNew(#30966)azurerm_postgresql_flexible_server- update validation forcustomer_managed_key.key_vault_key_idandcustomer_managed_key.geo_backup_key_vault_key_idto allow managed HSM keys as input (#31148)azurerm_postgresql_flexible_server- add support for PostgreSQL version18(#31162)azurerm_storage_encryption_scope- update validation forkey_vault_key_idto allow managed HSM keys as input (#31145)BUG FIXES:
azurerm_ssh_public_key- fix normalisation forpublic_keyto avoid removing a literalEOTfrom the base64 encoded content (#31249)azurerm_data_protection_backup_vault- poll delete request for completion (#31202)azurerm_function_app_hybrid_connection- remove validation preventing resource import when using an elastic service plan SKU (#31134)azurerm_key_vault_key-not_before_dateandexpiration_dateare now set into state when empty, fixing an issue where drift was not detected (#31192)azurerm_key_vault_secret-not_before_dateandexpiration_dateare now set into state when empty, fixing an issue where drift was not detected (#31192)azurerm_kubernetes_cluster- fix drift onazure_policy_enabledwhen updating cluster (#30917)azurerm_kubernetes_fleet_update_run- fix a nil pointer dereference to prevent panics (#31213)azurerm_lb_nat_rule- fix an issue that prevented changingfloating_ip_enabledandtcp_reset_enabledfromtruetofalse(#31244)azurerm_lb_outbound_rule- fix an issue that prevented changingtcp_reset_enabledfromtruetofalse(#31244)azurerm_lb_rule- fix an issue that prevented changingfloating_ip_enabledandtcp_reset_enabledfromtruetofalse(#31244)azurerm_private_endpoint- ensure Resource Identity data is set on create to avoidMissing Resource Identity After Createerrors (#31246)azurerm_resource_group- fix poller for theprevent_deletion_if_contains_resourcesfeature, resolving an Azure eventual consistency issue (#31253)azurerm_storage_account- ensure Resource Identity data is set on create to avoidMissing Resource Identity After Createerrors (#31246)azurerm_traffic_manager_profile- fix an issue that prevented changingtraffic_view_enabledfromtruetofalse(#31066)v4.54.0Compare Source
FEATURES:
azurerm_cdn_front_door_cache_purge(#30765)azurerm_data_protection_backup_instance_protect(#31085)azurerm_managed_redis_databases_flush(#31132)azurerm_mssql_execute_job(#31095)azurerm_network_interface(#31012)azurerm_network_profile(#31127)azurerm_network_security_group(#31014)azurerm_route_table(#31015)ENHANCEMENTS:
go-azure-sdk- update tov0.20251107.1191907(#31095)azurerm_container_app- add support for thetemplate.cooldown_period_in_secondsandtemplate.polling_interval_in_secondsproperties (#29426)azurerm_container_app- add support for thetemplate.cooldown_period_in_secondsandtemplate.polling_interval_in_secondsproperties (#29426)azurerm_linux_function_app- add support fordotnet_version10.0(#31007)azurerm_linux_function_app_slot- add support fordotnet_version10.0(#31007)azurerm_linux_web_app- add support fordotnet_version10.0(#31007)azurerm_linux_web_app_slot- add support fordotnet_version10.0(#31007)azurerm_managed_redis- add support forpersistence_append_only_file_backup_frequencyandpersistence_redis_database_backup_frequencyproperties (#30964)azurerm_resource_group- refactored from legacy SDK to usego-azure-sdk(#30616)azurerm_service_plan- suppress casing difference onsku_name(#30907)azurerm_storage_share_directory- Deprecatestorage_share_idin favour ofstorage_share_url(#28457)azurerm_storage_share_file- Deprecatestorage_share_idin favour ofstorage_share_url(#28457)azurerm_windows_function_app- add support fordotnet_versionv10.0(#31007)azurerm_windows_function_app_slot- add support fordotnet_versionv10.0(#31007)azurerm_windows_web_app- add support fordotnet_versionv10.0(#31007)azurerm_windows_web_app_slot- add support fordotnet_versionv10.0(#31007)BUG FIXES:
azurerm_orchestrated_virtual_machine_scale_set- Fix issue when using a specialized image (#30889)azurerm_virtual_network- remove RO values from update to avoid issues with API payload size limitation (#30945)v4.53.0Compare Source
FEATURES:
azurerm_api_management_workspace_certificate(#30628)azurerm_mongo_cluster_firewall_rule(#31062)ENHANCEMENTS:
automation- update to API version2024-10-23(#30890)go-azure-sdk- update tov0.20251029.1173336(#31051)managedredis- update to API Version2025-07-01(#31051)mongocluster- update to API version2025-09-01(#30982)azurerm_api_management_backend- add support for thecircuit_breaker_ruleblock (#30471)azurerm_dynatrace_monitor- support for theYEARLYvalue in thebilling_cycleproperty (#31078)azurerm_kubernetes_cluster_node_pool- support for theundrainable_node_behaviorandmax_unavailableproperties (#30563)azurerm_managed_disk- support expanding Ultra Disks and Premium SSD v2 disk without downtime (#30593)azurerm_managed_redis- add support forpublic_network_access(#31051)azurerm_storage_table_entity- resource is now removed from state if it no longer exists in Azure (#31064)azurerm_synapse_spark_pool- add support forspark_version3.5(#30900)data.azurerm_postgresql_flexible_server- add support forzoneandhigh_availability(#31034)BUG FIXES:
azurerm_dynatrace_monitor- thephone_numberandcountryproperties are no longer Required (#31077)azurerm_dynatrace_tag_rules- thelog_rule.filtering_tagproperty is no longer required (#31065)azurerm_dynatrace_tag_rules- themetric_rule.filtering_tagproperty is no longer required (#31065)azurerm_kubernetes_cluster- fix crash in use ofazure_active_directory_role_based_access_control(#31101)azurerm_logic_app_workflow- fix inaccurate error messages (#30963)azurerm_virtual_network_gateway- fix validation forpolicy_group.nameandvpn_client_configuration.virtual_network_gateway_client_connection.policy_group_names(#30454)v4.52.0Compare Source
NOTE: This release removes the
azurerm_spatial_anchors_accountresource and data source due to Azure having retired the serviceFEATURES:
azurerm_api_management_workspace_api_version_set(#30498)ENHANCEMENTS:
Goupdated tov1.25.3(#31020)azurerm_application_gateway- add support for thebackend_http_settings.dedicated_backend_connection_enabledproperty (#31033)azurerm_application_gateway- add support for thebackend_http_settings.dedicated_backend_connection_enabledproperty (#31033)azurerm_machine_learning_datastore_blobstorage- improve validation forstorage_container_id(#31002)azurerm_machine_learning_datastore_datalake_gen2- improve validation forstorage_container_id(#31002)azurerm_windows_web_app- add support for thevirtual_network_image_pull_enabledproperty (#30920)azurerm_windows_web_app_slot- add support for thevirtual_network_image_pull_enabledproperty (#30920)BUG FIXES:
azurerm_container_registry_task- prevent a panic by adding a nil check (#31043)Configuration
📅 Schedule: Branch creation - "after 7am and before 11am every weekday" in timezone Europe/London, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.