BUG FIXES:
azurerm_cosmosdb_account
- prevent a panic when the API returns an nil list of read or write locations (#16031)azurerm_cdn_endpoint
- prevent a panic when there is an emptycountry_codes
property (#16066)azurerm_key_vault
- fix theauthorizer was not an auth.CachedAuthorizer
error (#16078)azurerm_linux_function_app
- correctly update storage settings when using MSI (#16046)azurerm_managed_disk
- changing thezone
property now correctly create a new resource (#16070)azurerm_resource_group
- wait for eventual consistency when deleting (#16073)azurerm_windows_function_app
- correctly update storage settings when using MSI (#16046)
BUG FIXES:
- provider: the
prevent_deletion_if_contains_resources
feature flag within theresource_group
block now defaults totrue
(#16021)
NOTES:
- Major Version: Version 3.0 of the Azure Provider is a major version - some behaviours have changed and some deprecated fields/resources have been removed - please refer to the 3.0 upgrade guide for more information.
- When upgrading to v3.0 of the AzureRM Provider, we recommend upgrading to the latest version of Terraform Core (which can be found here) - the next major release of the AzureRM Provider (v4.0) will require Terraform 1.0 or later.
FEATURES:
- New Data Source:
azurerm_healthcare_workspace
(#15759) - New Data Source:
azurerm_key_vault_encrypted_value
(#15873) - New Data Source:
azurerm_managed_api
(#15797) - New Resource:
azurerm_api_connection
(#15797) - New Resource:
azurerm_healthcare_workspace
(#15759) - New Resource:
azurerm_stream_analytics_function_javascript_uda
(#15831) - New Resource:
azurerm_security_center_server_vulnerability_assessment_virtual_machine
(#15747)
ENHANCEMENTS:
- dependencies: updating to
v62.3.0
ofgit.luolix.top/Azure/azure-sdk-for-go
(#15927) - dependencies: updating to
v0.26.0
ofgit.luolix.top/hashicorp/go-azure-helpers
(#15889) - dependencies: updating
appplatform
to API Version2022-01-01-preview
(#15597) - provider: MSAL (and Microsoft Graph) is now used for authentication instead of ADAL (and Azure Active Directory Graph) (#12443)
- provider: all (non-deprecated) resources now validate the Resource ID during import (#15989)
- provider: added a new feature flag within the
api_management
block forrecover_soft_deleted
, for configuring whether a soft-deletedazurerm_api_management
should be recovered during creation (#15871) - provider: added a new feature flag within the
key_vault
block forrecover_soft_deleted_certificates
, for configuring whether a soft-deletedazurerm_key_vault_certificate
should be recovered during creation (#10273) - provider: added a new feature flag within the
key_vault
block forpurge_soft_deleted_certificates_on_destroy
, for configuring whether a deletedazurerm_key_vault_certificate
should be purged during deletion (#10273) - provider: added a new feature flag within the
key_vault
block forrecover_soft_deleted_keys
, for configuring whether a soft-deletedazurerm_key_vault_key
should be recovered during creation (#10273) - provider: added a new feature flag within the
key_vault
block forpurge_soft_deleted_keys_on_destroy
, for configuring whether a deletedazurerm_key_vault_key
should be purged during deletion (#10273) - provider: added a new feature flag within the
key_vault
block forrecover_soft_deleted_secrets
, for configuring whether a soft-deletedazurerm_key_vault_secret
should be recovered during creation (#10273) - provider: added a new feature flag within the
key_vault
block forpurge_soft_deleted_secrets_on_destroy
, for configuring whether a deletedazurerm_key_vault_secret
should be purged during deletion (#10273) - provider: added a new feature flag within the
resource_group
block forprevent_deletion_if_contains_resources
, for configuring whether Terraform should prevent the deletion of a Resource Group which still contains items (#13777) - provider: the feature flag
permanently_delete_on_destroy
within thelog_analytics_workspace
block now defaults totrue
(#15948) - Resources supporting Availability Zones: Zones are now treated consistently across the Provider and the field within Terraform has been renamed to either
zone
(for a single Zone) orzones
(where multiple can be defined) - the complete list of resources can be found in the 3.0 Upgrade Guide (#14588) - Resources supporting Managed Identity: Identity blocks are now treated consistently across the Provider - the complete list of resources can be found in the 3.0 Upgrade Guide (#15187)
- provider: removing the
network
andrelaxed_locking
feature flags, since this is now enabled by default (#15719) - Data Source:
azurerm_linux_function_app
- support for thestorage_key_vault_secret_id
property (#15793) - Data Source:
azurerm_storage_account_sas
- now exports thetag
andfilter
attributes (#15863) - Data Source:
azurerm_windows_function_app
- support forstorage_key_vault_secret_id
property (#15793) azurerm_application_insights
- can now disable Rule and Action Groups that are automatically created (#15892)azurerm_cdn_endpoint
- thehost_name
property has been renamed tofqdn
(#15992)azurerm_eventgrid_system_topic_event_subscription
- support for thedelivery_property
property (#15559)azurerm_iothub
- add support for theauthentication_type
andidentity_id
properties in thefile_upload
block (#15874)azurerm_kubernetes_cluster
- thekube_admin_config
block is now marked as sensitive in addition to all items within it (#4105)azurerm_kubernetes_cluster
- add support for thekey_vault_secrets_provider
andopen_service_mesh_enabled
property in Azure China and Azure Government (#15878)azurerm_linux_function_app
- add support for thestorage_key_vault_secret_id
property (#15793)azurerm_linux_function_app
- updating the read timeout to be5m
(#15867)azurerm_linux_function_app
- support for node version16
preview (#15884)azurerm_linux_function_app
- add support foruse_dotnet_isolated_runtime
(#15969)azurerm_linux_function_app_slot
- add support foruse_dotnet_isolated_runtime
(#15969)azurerm_linux_function_app_slot
- add support forstorage_key_vault_secret_id
(#15793)azurerm_linux_function_app_slot
- updating the read timeout to be 5m (#15867)azurerm_linux_virtual_machine
- support for thetermination_notification
property (#14933)azurerm_linux_virtual_machine
- support for theedge_zone
property (#15890)azurerm_linux_virtual_machine_scale_set
- support for theedge_zone
property (#15890)azurerm_linux_web_app
- support for PHP version 8.0 (#15933)azurerm_loadbalancer
- support for theedge_zone
property (#15890)azurerm_managed_disk
- support for theedge_zone
property (#15890)azurerm_management_group_policy_assignment
- support for User Assigned Identities (#15376)azurerm_mssql_server
- theminimum_tls_version
property now defaults to1.2
(#10276)azurerm_mysql_server
- thessl_minimal_tls_version_enforced
property now defaults to1.2
(#10276)azurerm_network_interface
- support for theedge_zone
property (#15890)azurerm_network_security_rule
- no longer locks on the network security group name (#15719)azurerm_postgresql_server
- thessl_minimal_tls_version_enforced
property now defaults to1.2
(#10276)azurerm_public_ip
- support for theedge_zone
property (#15890)azurerm_redis_cache
- theminimum_tls_version
property now defaults to1.2
(#10276)azurerm_resource_group
- Terraform now checks during the deletion of a Resource Group if there's any items remaining and will raise an error if so by default (to avoid deleting items unintentionally). This behaviour can be controlled using theprevent_deletion_if_contains_resources
feature-flag within theresource_group
block within thefeatures
block. (#13777)azurerm_resource_group_policy_assignment
- support for User Assigned Identities (#15376)azurerm_resource_policy_assignment
- support for User Assigned Identities (#15376)azurerm_sentinel_alert_rule_scheduled
- support foralert_details_override
(#15901)azurerm_sentinel_alert_rule_scheduled
- support forentity_mapping
[#15901]azurerm_sentinel_alert_rule_scheduled
- support forcustom_details
(#15901)azurerm_sentinel_alert_rule_scheduled
- support forgroup_by_alert_details
(#15901)azurerm_sentinel_alert_rule_scheduled
- support forgroup_by_custom_details
(#15901)azurerm_site_recovery_replicated_vm
- support for thetarget_availability_zone
property (#15617)azurerm_shared_image
- support for thesupport_accelerated_network
property (#15562)azurerm_static_site
- theidentity
property now supportsSystemAssigned
andUserAssigned
(#15834)azurerm_storage_account
- theallow_blob_public_access
property has been renamed toallow_nested_items_to_be_public
to better represent what is being enabled (#12689)azurerm_storage_account
- support for theedge_zone
property (#15890)azurerm_storage_account
-ZRS
is no longer supported when usingStorageV1
(#16004)azurerm_storage_account
- themin_tls_version
property now defaults to1.2
(#10276)azurerm_storage_share
-quota
is now required (#15982)azurerm_subscription_policy_assignment
- support for User Assigned Identities (#15376)azurerm_virtual_network
- support for theedge_zone
property (#15890)azurerm_virtual_network_gateway
- support for theedge_zone
property (#15890)azurerm_virtual_hub
- support for thevirtual_router_asn
andvirtual_router_ips
properties (#15741)azurerm_windows_function_app
- add support forstorage_key_vault_secret_id
property (#15793)azurerm_windows_function_app
- updating the read timeout to be5m
(#15867)azurerm_windows_function_app
node version validation string can not be prefixed with~
(#15884)azurerm_windows_function_app
support for node version16
preview support (#15884)azurerm_windows_function_app
- add support foruse_dotnet_isolated_runtime
(#15969)azurerm_windows_function_app_slot
- add support foruse_dotnet_isolated_runtime
(#15969)azurerm_windows_function_app_slot
- add support for thestorage_key_vault_secret_id
property (#15793)azurerm_windows_function_app_slot
- updating the read timeout to be 5m (#15867)azurerm_windows_virtual_machine
- support for thetermination_notification
property (#14933)azurerm_windows_virtual_machine
- support for theedge_zone
property (#15890)azurerm_windows_virtual_machine_scale_set
- support for theedge_zone
property (#15890)
BUG FIXES:
- provider: the
recover_soft_deleted_key_vaults
feature flag within thekey_vault
block now defaults totrue
(#15984) - provider: the
purge_soft_delete_on_destroy
feature flag within thekey_vault
block now defaults totrue
[#15984] azurerm_app_configuration_feature
- detecting that the key is gone when the App Configuration has been deleted (#15973)azurerm_app_configuration_key
- detecting that the key is gone when the App Configuration has been deleted (#15973)azurerm_application_gateway
- thebackend_address_pool
block is now a Set rather than a List (#6896)azurerm_application_gateway
- the fieldfqdns
within thebackend_address_pool
block is now a Set rather than a List (#6896)azurerm_application_gateway
- the fieldip_addresses
within thebackend_address_pool
block is now a Set rather than a List (#6896)azurerm_application_gateway
- thebackend_http_settings
block is now a Set rather than a List (#6896)azurerm_application_gateway
- thefrontend_port
block is now a Set rather than a List (#6896)azurerm_application_gateway
- the fieldhost_names
within thefrontend_port
block is now a Set rather than a List (#6896)azurerm_application_gateway
- thehttp_listener
block is now a Set rather than a List (#6896)azurerm_application_gateway
- theprivate_endpoint_connection
block is now a Set rather than a List (#6896)azurerm_application_gateway
- theprivate_link_configuration
block is now a Set rather than a List (#6896)azurerm_application_gateway
- theprobe
block is now a Set rather than a List (#6896)azurerm_application_gateway
- theredirect_configuration
block is now a Set rather than a List (#6896)azurerm_application_gateway
- therequest_routing_rule
block is now a Set rather than a List (#6896)azurerm_application_gateway
- thessl_certificate
block is now a Set rather than a List (#6896)azurerm_container_registry
- validate thegeorepliactions
property does not include the location of the Container Registry (#15847)azurerm_cosmosdb_mongo_collection
- thedefault_ttl_seconds
property can now be set to-1
(#15736)azurerm_eventhub
- prevent panic when thecapture_description
block is removed (#15930)azurerm_key_vault_access_policy
- validating the Resource ID during import (#15989)azurerm_linux_function_app
- fixed update handling ofapp_settings
forWEBSITE_CONTENTSHARE
andWEBSITE_CONTENTAZUREFILECONNECTIONSTRING
(#15907)azurerm_linux_function_app_slot
- fixed update handling ofapp_settings
forWEBSITE_CONTENTSHARE
andWEBSITE_CONTENTAZUREFILECONNECTIONSTRING
(#15907)azurerm_local_network_gateway
- fix foraddress_space
cannot be updated (#15159)azurerm_log_analytics_cluster_customer_managed_key
- detecting when the Customer Managed Key has been removed (#15973)azurerm_mssql_database_vulnerability_assessment_rule_baseline
- prevent the resource from being replaced every apply (#14759)azurerm_security_center_auto_provisioning
- validating the Resource ID during import [#15989]azurerm_security_center_setting
- changing thesetting_name
property now forces a new resource (#15983)azurerm_synapse_workspace
- fixing a bug where workspaces created from a Dedicated SQL Pool / SQL Data Warehouse couldn't be retrieved (#15829)azurerm_synapse_workspace_key
- keys can now be correctly rotated (#15897)azurerm_windows_function_app
- fixed update handling ofapp_settings
forWEBSITE_CONTENTSHARE
andWEBSITE_CONTENTAZUREFILECONNECTIONSTRING
(#15907)azurerm_windows_function_app_slot
- fixed update handling ofapp_settings
forWEBSITE_CONTENTSHARE
andWEBSITE_CONTENTAZUREFILECONNECTIONSTRING
(#15907)
For information on changes between the v2.99.0 and v2.0.0 releases, please see the previous v2.x changelog entries.
For information on changes between the v1.44.0 and v1.0.0 releases, please see the previous v1.x changelog entries.
For information on changes prior to the v1.0.0 release, please see the v0.x changelog.