Update Terraform azurerm to v4

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
azurerm (source)	required_provider	major	3.113.0 -> 4.3.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

hashicorp/terraform-provider-azurerm (azurerm)

v4.3.0

Compare Source

FEATURES:

• New Resource: azurerm_advisor_suppression (#​26177)
• New Resource: azurerm_data_protection_backup_policy_mysql_flexible_server (#​26955)
• New Resource: azurerm_key_vault_managed_hardware_security_module_key_rotation_policy (#​27306)
• New Resource: azurerm_stack_hci_deployment_setting (#​25646)
• New Resource: azurerm_stack_hci_storage_path (#​26509)
• New Data Source: azurerm_vpn_server_configuration (#​27054)

ENHANCEMENTS:

• managementgroups - migrate to hashicorp/go-azure-sdk (#​26430)
• nginx - upgrade api version to 2024-06-01-preview (#​27345)
• azurerm_linux[windows]_web[function]_app[app_slot] - upgrade api version from 2023-01-01 to 2023-12-01 (#​27196)
• azurerm_cosmosdb_account - support for the capability EnableNoSQLVectorSearch (#​27357)azurerm_container_app_custom_domain - fix parsing the certificate ID error #​25972
• azurerm_container_app_custom_domain - support other certificate types (#​25972)
• azurerm_linux_virtual_machine_scale_set - the zones property can now be updated without creating a new resource (#​27288)
• azurerm_orchestrated_virtual_machine_scale_set - the zones property can now be updated without creating a new resource (#​27288)
• azurerm_role_management_policy - support for resource scope (#​27205)
• azurerm_spring_cloud_gateway - changing the environment_variables and sensitive_environment_variables properties no longer creates a new resource (#​27404)
• azurerm_static_web_app - support for the public_network_access_enabled property (#​26345)
• azurerm_shared_image - support for the disk_controller_type_nvme_enabled property (#​26370)
• azurerm_storage_blob - changing the source property no longer creates a new resource (#​27394)
• azurerm_storage_object_replication - changing the rules.x. source_container_name and rules.x. destination_container_name properties no longer creates a new resource (#​27394)
• azurerm_windows_virtual_machine_scale_set - the zones property can now be updated without creating a new resource (#​27288)

BUG FIXES:

• azurerm_application_insights - fix crash when read for DataVolumeCap is nil (#​27352)
• azurerm_container_app - relax validation on the ingress traffic property (#​27396)
• azurerm_log_analytics_workspace_table - will now correctly set total_retention_in_days when sku is Basic (#​27420)

v4.2.0

Compare Source

FEATURES:

• New Resource: azurerm_arc_machine (#​26647)
• New Resource: azurerm_arc_machine_automanage_configuration_assignment (#​26657)

ENHANCEMENTS:

• network/bastionhosts - upgrade api version from 2023-11-01 to 2024-01-01 (#​27277)
• recoveryservices - upgrade recoveryservicessiterecovery from 2022-10-01 to 2024-04-01 (#​27281)
• azurerm_data_protection_backup_vault - support for the property cross_region_restore_enabled property (#​27197)
• azurem_mssql_managed_instance - support for the service_principal_type property (#​27240)

BUG FIXES:

• azurerm_cosmosdb_account - fix crash during state migration (#​27302)
• azurerm_servicebus_queue - fix defaults of the default_message_ttl and auto_delete_on_idle properties (#​27305)

v4.1.0

Compare Source

ENHANCEMENTS:

• dependencies - bump hashicorp/go-azure-sdk to v0.20240903.1111904 (#​27268)
• Virtual Machine Scale Sets - upgrade api version from 2024-03-01 to 2024-07-01 (#​27230)
• hdinsights - update the HDInsights Node definition validation of VM sizes to include new V5 types (#​27270)
• azurerm_api_management_logger - support for the application_insights.connection_string property (#​27137)
• azurerm_bot_service_azure_bot - will now send the value for the developer_app_insights_api_key property (#​27280)
• azurerm_netapp_volume - support for the smb3_protocol_encryption_enabled property (#​27228)
• azurerm_subnet - support Microsoft.DevOpsInfrastructure as delegation service (#​27259)

BUG FIXES:

• azurerm_mysql_flexible_server - correctly set source_server_id in the state file (#​27295)
• azurerm_cosmosdb_account - the ip_range_filter property now supports IPV4 addresses (#​27208)
• azurerm_cosmosdb_account - added state migration for ip_range_filter underlying type change from string to set (#​27276)
• azurerm_linux_virtual_machine - the admin_ssh_key.public_key property now supports ed25519 ssh keys (#​27202)
• azurerm_sentinel_automation_rule - no longer panics when using condition_json (#​27269)
• azurerm_kubernetes_cluster - the host_encryption_enabled and node_public_ip_enabled properties are now set correctly (#​27218)

v4.0.1

Compare Source

BUG FIXES:

• provider: fix a validation bug that prevents terraform validate from working when subscription_id is not specified (#​27178)
• azurerm_cognitive_deployment - fixed replacement of scale block with sku (#​27173)
• azurerm_kubernetes_cluster - prevent a panic (#​27183)
• azurerm_kubernetes_cluster_node_pool - prevent a panic caused by renamed enable_* properties (#​27164)
• azurerm_sentinel_data_connector_microsoft_threat_intelligence - prevent error by removing deprecated property bing_safety_phishing_url_lookback_date (#​27171)

v4.0.0

Compare Source

NOTES:

• Major Version: Version 4.0 of the Azure Provider is a major version - some behaviours have changed and some deprecated fields/resources have been removed - please refer to the 4.0 upgrade guide for more information.
• When upgrading to v4.0 of the AzureRM Provider, we recommend upgrading to the latest version of Terraform Core (which can be found here).

ENHANCEMENTS:

• Data Source: azurerm_shared_image - add support for the trusted_launch_supported, trusted_launch_enabled, confidential_vm_supported, confidential_vm_enabled, accelerated_network_support_enabled and hibernation_enabled properties (#​26975)
• dependencies: updating hashicorp/go-azure-sdk to v0.20240819.1075239 (#​27107)
• applicationgateways - updating to use 2023-11-01 (#​26776)
• containerregistry - updating to use 2023-06-01-preview (#​23393)
• containerservice - updating to 2024-05-01 (#​27105)
• mssql - updating to use hashicorp/go-azure-sdk and 023-08-01-preview (#​27073)
• mssqlmanagedinstance - updating to use hashicorp/go-azure-sdk and 2023-08-01-preview (#​26872)
• azurerm_image - add support for the disk_encryption_set_id property to the data_disk block (#​27015)
• azurerm_log_analytics_workspace_table - add support for more total_retention_in_days and retention_in_days values (#​27053)
• azurerm_mssql_elasticpool - add support for the HS_MOPRMS and MOPRMS skus (#​27085)
• azurerm_netapp_pool - allow 1 as a valid value for size_in_tb (#​27095)
• azurerm_notification_hub - add support for the browser_credential property (#​27058)
• azurerm_redis_cache - add support for the access_keys_authentication_enabled property (#​27039)
• azurerm_role_assignment - add support for the /, /providers/Microsoft.Capacity and /providers/Microsoft.BillingBenefits scopes (#​26663)
• azurerm_shared_image - add support for the hibernation_enabled property (#​26975)
• azurerm_storage_account - support queue_encryption_key_type and table_encryption_key_type for more storage account kinds (#​27112)
• azurerm_web_application_firewall_policy - add support for the request_body_enforcement property (#​27094)

BUG FIXES:

• azurerm_ip_group_cidr - fixed the position of the CIDR check to correctly refresh the resource when it's no longer present (#​27103)
• azurerm_monitor_diagnostic_setting - add further polling to work around an eventual consistency issue when creating the resource (#​27088)
• azurerm_storage_account - prevent API error by populating infrastructure_encryption_enabled when updating customer_managed_key (#​26971)
• azurerm_storage_blob_inventory_policy - the filter property can now be set when scope is container (#​27113)
• azurerm_virtual_network_dns_servers - moved locks to prevent the creation of subnets with stale data (#​27036)
• azurerm_virtual_network_gateway_connection - allow 0 as a valid value for ipsec_policy.sa_datasize (#​27056)

---

For information on changes between the v3.116.0 and v3.0.0 releases, please see the previous v3.x changelog entries.

For information on changes between the v2.99.0 and v2.0.0 releases, please see the previous v2.x changelog entries.

For information on changes between the v1.44.0 and v1.0.0 releases, please see the previous v1.x changelog entries.

For information on changes prior to the v1.0.0 release, please see the v0.x changelog.

v3.116.0

Compare Source

DEPRECATIONS:

All Azure Kubernetes Service (AKS) properties related to preview features are deprecated since they will not be available in a stable API. Please see https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/guides/4.0-upgrade-guide#aks-migration-to-stable-api for more details (#​26863)

FEATURES:

• New Resource: azurerm_ai_services (#​26008)
• New Resource: azurerm_communication_service_email_domain_association (#​26432)
• New Resource: azurerm_dev_center_project_environment_type (#​26941)
• New Resource: azurerm_extended_location_custom_location (#​24267)
• New Resource: azurerm_postgresql_flexible_server_virtual_endpoint (#​26708)

ENHANCEMENTS:

• notificationhub - updating to use version 2023-09-01 (#​26528)
• azurerm_api_management_api - update validation of path to allow single character strings (#​26922)
• azurerm_cosmosdb_account - add support for the property burst_capacity_enabled (#​26986)
• azurerm_linux_function_app - add support for vnet_image_pull_enabled property in 4.0 (#​27001)
• azurerm_linux_function_app_slot - add support for vnet_image_pull_enabled property in 4.0 (#​27001)
• azurerm_logic_app_standard - add support for v8.0 in site_config.dotnet_framework_version (#​26983)
• azurerm_management_group_policy_assignment - remove length restriction on name (#​27055)
• azurerm_recovery_services_vault - add support for the identity block (#​26254)
• azurerm_web_application_firewall_policy - add support for the js_challenge_cookie_expiration_in_minutes property (#​26878)
• azurerm_windows_function_app - add support for vnet_image_pull_enabled property in 4.0 (#​27001)
• azurerm_windows_function_app_slot - add support for vnet_image_pull_enabled property in 4.0 (#​27001)

BUG FIXES:

• Data Source: azurerm_storage_account - add default_share_level_permission to the azure_files_authentication to prevent invalid address errors (#​26996)
• Data Source: azurerm_search_service - expose the tags property (#​26978)
• Data Source: azurerm_virtual_machine - populate missing power_state (#​26991)
• Data Source: azurerm_virtual_machine_scale_set - populate missing power_state (#​26991)
• azurerm_api_management_api_schema - correctly unmarshal definition and components (#​26531)
• azurerm_cdn_frontdoor_secret - fix issue where expiration_date was being set into the parent block (#​26982)
• azurerm_container_app_environment - fix diff suppress on infrastructure_resource_group_name (#​27007)
• azurerm_express_route_connection - prevent sending private_link_fast_path_enabled in the payload if it hasn't been explicitly set (#​26928)
• azurerm_machine_learning_workspace - serverless_compute can now be updated (#​26940)
• azurerm_mssql_database - fix issue where the database cannot be upgraded to use serverless due to the behaviour of the license_type field (#​26850)
• azurerm_mssql_database - prevent error when creating Free edition by setting long_term_retention_policy and short_term_retention_policy as empty (#​26894)
• azurerm_nginx_deployment - omit capacity when creating deployments with a basic plan (#​26223)
• azurerm_role_management_policy - prevent panic when updating activation_rules.approval_stage (#​26800)
• azurerm_sentinel_threat_intelligence_indicator - prevent panic when importing this resource (#​26976)
• azurerm_servicebus_namespace - fix panic reading encryption with versionless ids (#​27060)
• azurerm_synapse_spark_pool - prevent plan diff due to API behaviour by setting node_count as Computed (#​26953)
• azurerm_virtual_network_gateway_connection - fix issue where ingress_nat_rule_ids was updating the egress rules on updates (#​27022)

v3.115.0

Compare Source

ENHANCEMENTS:

• cosmosdb - updating to use version 2024-05-15 (#​26758)
• healthcare - updating to use version 2024-03-31 (#​26699)
• redis - updating to use version 2024-03-01 (#​26932)
• azurerm_cosmosdb_account - avoid infinite diff to default_identity_type for legacy resources where an empty string is returned by the RP (#​26525)
• azurerm_linux_virtual_machine_scale_set - add support for the action property in the automatic_instance_repair block (#​26227)
• azurerm_log_analytics_saved_search - update the regex for the function_parameters property to support more paramters (#​26701)
• azurerm_monitor_data_collection_rule - update performance_counter.x.sampling_frequency_in_seconds range 1 to 1800 (#​26898)
• azurerm_orchestrated_virtual_machine_scale_set - add support for the action property in the automatic_instance_repair block (#​26227)
• azurerm_security_center_storage_defender - add support for the property scan_results_event_grid_topic_id (#​26599)
• azurerm_storage_account - add support for the property default_share_level_permission in the azure_files_authentication block (#​26924)
• azurerm_web_application_firewall_policy - excluded_rule_set.0.type supports Microsoft_BotManagerRuleSet (#​26903)
• azurerm_windows_virtual_machine_scale_set - add support for the action property in the automatic_instance_repair block (#​26227)

BUG FIXES:

• azurerm_container_group - retrieve and set storage_account_key in the payload when updating the resource (#​26640)
• azurerm_key_vault_managed_hardware_security_module_role_assignment - fixed a crash in error messages (#​26972)
• azurerm_kubernetes_cluster - allow an empty list for dns_zone_ids in the web_app_routing block (#​26747)
• azurerm_storage_share_file - fix a bug when encoding the MD5 hash for the content_md5 property (#​25715)

v3.114.0

Compare Source

UPGRADE NOTES:

• 4.0 Beta: This release includes a new feature-flag to opt-into the 4.0 Beta - which (when enabled) introduces a number of behavioural changes, field renames and removes some older deprecated resources and data sources. Please read the disclaimers carefully that are outlined in our guide on how to opt-into the 4.0 Beta before enabling this, as this will cause irreversible changes to your state. The 4.0 Beta is still a work-in-progress at this time and the changes listed in the 4.0 Upgrade Guide may change. We're interested to hear your feedback which can be provided by following this link.

FEATURES:

• New Resource: azurerm_dev_center_network_connection (#​26718)
• New Resource: azurerm_stack_hci_logical_network (#​26473)

ENHANCEMENTS:

• dependencies: updating go-azure-helpers to v0.70.1 (#​26757)
• arckubernetes - updating to use version 2024-01-01 (#​26761)
• data.azurerm_storage_account - the enable_https_traffic_only property has been superseded by https_traffic_only_enabled (#​26740)
• azurerm_log_analytics_cluster - add support for setting size_gb to 100 [GH-#​26865]
• azurerm_storage_account - the enable_https_traffic_only property has been superseded by https_traffic_only_enabled (#​26740)

BUG FIXES:

• azurerm_dns_cname_record - split create and update function to fix lifecycle - ignore (#​26610)
• azurerm_dns_srv_record - split create and update function to fix lifecycle - ignore (#​26627)
• azurerm_kubernetes_cluster - fix issue that prevented max_count from being updated (#​26417)
• azurerm_linux_web_app - correctly set site_config.always_on as configured during Update (#​25753)
• azurerm_linux_web_app_slot - correctly set site_config.always_on as configured during Update (#​25753)
• azurerm_management_group_policy_remediation - fix panic in deprecated schema change for 4.0 (#​26767)
• azurerm_network_security_rule - fix panic when updating source_port_ranges (#​26883)
• azurerm_public_ip - fix panix when updating idle_timeout_in_minutes

DEPRECATIONS:

• azurerm_redis_cache - enable_non_ssl_port has been superseded by non_ssl_port_enabled and redis_configuration. enable_authentication has been superseded by redis_configuration.authentication_enabled (#​26608)

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" in timezone Europe/London, Automerge - "after 10am every weekday,before 4pm every weekday" in timezone Europe/London.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.