v3.105.0

BREAKING CHANGE:

• azurerm_kubernetes_cluster - the properties workload_autoscaler_profile.vertical_pod_autoscaler_update_mode and workload_autoscaler_profile.vertical_pod_autoscaler_controlled_values are no longer populated since they're not exported in API version 2023-09-02-preview (#25663)

FEATURES:

• New Resource: azurerm_api_management_policy_fragment (#24968)

ENHANCEMENTS:

• dependencies: updating to v0.20240522.1080424 of github.com/hashicorp/go-azure-sdk (#26069)
• containerservice: updating to use API Version 2023-09-02-preview (#25663)
• azurerm_application_insights_standard_web_test - http_verb can now be set to HEAD and OPTIONS (#26077)
• azurerm_cdn_frontdoor_rule - updating the validation for match_values within the uri_path_condition block to support a forward-slash (#26017)
• azurerm_linux_web_app - normalising the value for virtual_network_subnet_id (#25885)
• azurerm_machine_learning_compute_cluster - add validation for name (#26060)
• azurerm_machine_learning_compute_cluster - improve validation to allow an empty subnet_resource_id when the Workspace is using a managed Virtual Network (#26073)
• azurerm_postgresql_flexible_server - the field public_network_access_enabled is now configurable (previously this was computed-only/not settable via the API) (#25812)
• azurerm_snapshot - support for disk_access_id (#25996)
• azurerm_windows_web_app - normalising the value for virtual_network_subnet_id (#25885)

BUG FIXES:

• azurerm_container_app_environment_custom_domain: parsing the Log Analytics Workspace ID insensitively to workaround the API returning this inconsistently (#26074)
• azurerm_container_app_job - updating the validation for the name field (#26049)
• azurerm_container_app_job - updating the validation for the name field within the custom_scale_rule block (#26049)
• azurerm_container_app_job - updating the validation for the name field within the rules block (#26049)
• azurerm_linux_function_app_slot - fixed panic when planning from a version older than 3.88.0 (#25838)
• azurerm_pim_active_role_assignment - fix a persistent diff when ticket is not specified (#26059)
• azurerm_pim_eligible_role_assignment - fix a persistent diff when ticket is not specified (#26059)
• azurerm_policy_definition - recreate the resource if the parameters property is updated to include fewer items (#26083)
• azurerm_windows_function_app_slot - set Server Farm ID in payload when using a Virtual Network Subnet for the slot (#25634)
• azurerm_windows_web_app_slot - set Server Farm ID in payload when using a Virtual Network Subnet for the slot (#25634)

v3.104.2

NOTE: This is a re-release of v3.104.1 to include missing changes, please refer to the changelog entries for v3.104.1.

v3.104.1

BUG FIXES:

• azurerm_pim_active_role_assignment - fix a regression where roles assignments could not be created with no expiration (#26029)
• azurerm_pim_eligible_role_assignment - fix a regression where roles assignments could not be created with no expiration (#26029)

v3.104.0

FEATURES:

• New Data Source: azurerm_elastic_san (#25719)

ENHANCEMENTS:

• New Resource - azurerm_key_vault_managed_hardware_security_module_key (#25935)
• Data Source - azurerm_kubernetes_service_version - support for the default_version property (#25953)
• network/applicationgateways - update to use hashicorp/go-azure-sdk (#25844)
• dataprotection - update API version to 2024-04-01 (#25882)
• databasemigration - update API version to 2021-06-30 (#25997)
• network/ips - update to use hashicorp/go-azure-sdk (#25905)
• network/localnetworkgateway - update to use hashicorp/go-azure-sdk (#25905)
• network/natgateway - update to use hashicorp/go-azure-sdk (#25905)
• network/networksecuritygroup - update to use hashicorp/go-azure-sdk (#25971)
• network/publicips - update to use hashicorp/go-azure-sdk (#25971)
• network/virtualwan - update to use hashicorp/go-azure-sdk (#25971)
• network/vpn - update to use hashicorp/go-azure-sdk (#25971)
• azurerm_databricks_workspace - support for the default_storage_firewall_enabled property (#25919)
• azurerm_key_vault - allow previously existing key vaults to continue to manage the contact field prior to the v3.93.0 conditional polling change (#25777)
• azurerm_linux_function_app - support for the PowerShell 7.4 (#25980)
• azurerm_log_analytics_cluster - support for the value UserAssigned in the identity.type property (#25940)
• azurerm_pim_active_role_assignment - remove hard dependency on the roleAssignmentScheduleRequests API, so that role assignments will not become unmanageable over time (#25956)
• azurerm_pim_eligible_role_assignment - remove hard dependency on the roleEligibilityScheduleRequests API, so that role assignments will not become unmanageable over time (#25956)
• azurerm_windows_function_app - support for the PowerShell 7.4 (#25980)

BUG FIXES:

• azurerm_container_app_job - Allow event_trigger_config.scale.min_executions to be 0 (#25931)
• azurerm_container_app_job - update validation to allow the replica_retry_limit property to be set to 0 (#25984)
• azurerm_data_factory_trigger_custom_event - one of subject_begins_with and subject_ends_with no longer need to be set (#25932)
• azurerm_kubernetes_cluster_node_pool - prevent race condition by checking the virtual network status when creating a node pool with a subnet ID (#25888)
• azurerm_postgresql_flexible_server - fix for default storage_tier value when storage_mb field has been changed (#25947)
• azurerm_pim_active_role_assignment - resolve a number of potential crashes (#25956)
• azurerm_pim_eligible_role_assignment - resolve a number of potential crashes (#25956)
• azurerm_redis_enterprise_cluster_location_zone_support - add Central India zones support (#26000)
• azurerm_sentinel_alert_rule_scheduled - the alert_rule_template_version property is no longer ForceNew (#25688)
• azurerm_storage_sync_server_endpoint - preventing a crashed due to initial_upload_policy (#25968)

v3.103.1

BUG FIXES

• loadtest - fixing an issue where the SDK Clients weren't registered (#25920)

v3.103.0

FEATURES:

• New Resource: azurerm_container_app_job (#23871)
• New Resource: azurerm_container_app_environment_custom_domain (#24346)
• New Resource: azurerm_data_factory_credential_service_principal (#25805)
• New Resource: azurerm_network_manager_connectivity_configuration (#25746)
• New Resource: azurerm_maintenance_assignment_dynamic_scope (#25467)
• New Resource: azurerm_virtual_machine_gallery_application_assignment (#22945)
• New Resource: azurerm_virtual_machine_automanage_configuration_assignment (#25480)

ENHANCEMENTS:

• provider - support for the recover_soft_deleted_backup_protected_vm feature (#24157)
• dependencies: updating github.com/hashicorp/go-azure-helpers to v0.69.0 (#25903)
• loganalytics - update cluster resource to api version 2022-01-01 (#25686)
• azurerm_bastion_host - support for the kerberos_enabled property (#25823)
• azurerm_container_app - secrets can now be removed (#25743)
• azurerm_container_app_environment - support for the custom_domain_verification_id property (#24346)
• azurerm_linux_virtual_machine - support for the additional capability hibernation_enabled (#25807)
• azurerm_linux_virtual_machine - support for additional values for the license_type property (#25909)
• azurerm_linux_virtual_machine_scale_set - support for the maximum_surge_instances property for vmss rolling upgrades (#24914)
• azurerm_windows_virtual_machine - support for the additional capability hibernation_enabled (#25807)
• azurerm_windows_virtual_machine_scale_set - support for the maximum_surge_instances_enabled property for vmss rolling upgrades (#24914)
• azurerm_storage_account - support for the permanent_delete_enabled property within retention policies (#25778)

BUG FIXES:

• azurerm_kubernetes_cluster - erase load_balancer_profile when changing network_profile.outbound_type from loadBalancer to another outbound type (#25530)
• azurerm_log_analytics_saved_search - the function_parameters property now repsects the order of elements (#25869)
• azurerm_linux_web_app - fix slow_request with path issue in auto_heal by adding support for slow_request_with_path block (#20049)
• azurerm_linux_web_app_slot - fix slow_request with path issue in auto_heal by adding support for slow_request_with_path block (#20049)
• azurerm_monitor_private_link_scoped_service - normalize case of the linked_resource_id property during reads (#25787)
• azurerm_role_assignment - add addtional retry logic to assist with cross-tenant use (#25853)
• azurerm_web_pubsub_network_acl - fixing a crash when networkACL.PublicNetwork.Deny was nil (#25886)
• azurerm_windows_web_app - fix slow_request with path issue in auto_heal by adding support for slow_request_with_path block (#20049)
• azurerm_windows_web_app_slot - fix slow_request with path issue in auto_heal by adding support for slow_request_with_path block (#20049)

v3.102.0

FEATURES:

• New Resource: azurerm_storage_sync_server_endpoint (#25831)
• New Resource: azurerm_storage_container_immutability_policy (#25804)

ENHANCEMENTS:

• azurerm_load_test - add support for encryption (#25759)
• azurerm_network_connection_monitor - update validation for target_resource_type and target_resource_id (#25745)
• azurerm_mssql_managed_database - support for a Restorable Database ID to be used as the source_database_id for point in time restore (#25568)
• azurerm_storage_account - support for the managed_hsm_key_id property (#25088)
• azurerm_storage_account_customer_managed_key - support for the managed_hsm_key_id property (#25088)

BUG FIXES:

• azurerm_linux_function_app - now sets docker registry url in linux_fx_version by default (#23911)
• azurerm_resource_group - work around sporadic eventual consistency errors (#25758)

DEPRECATIONS:

• azurerm_key_vault_managed_hardware_security_module_role_assignment - the vault_base_url property has been deprecated in favour of the managed_hsm_id property (#25601)

v3.101.0

ENHANCEMENTS:

• dependencies: updating to v0.20240424.1114424 of github.com/hashicorp/go-azure-sdk (#25749)
• dependencies: updating to v0.27.0 of github.com/tombuildsstuff/giovanni (#25702)
• dependencies: updating golang.org/x/net to 0.23.0
• azurerm_cognitive_account - the kind property now supports ConversationalLanguageUnderstanding (#25735)
• azurerm_container_app_custom_domain - support the ability to use Azure Managed Certificates (#25356)

BUG FIXES:

• Data Source: azurerm_application_insights - set correct AppID in data source (#25687)
• azurerm_virtual_network - suppress diff in ordering for address_space due to inconsistent API response (#23793)
• azurerm_storage_data_lake_gen2_filesystem - add context deadline for import (#25712)
• azurerm_virtual_network_gateway - preserve existing nat_rules on updates (#25690)

v3.100.0

ENHANCEMENTS:

• dependencies: updating hashicorp/go-azure-sdk to v0.20240417.1084633 (#25659)
• compute - update Virtual Machine and Virtual Machine Scale Set resources and data sources to use hashicorp/go-azure-sdk (#25533)
• machine_learning - Add new machine_learning block that supports purge_soft_deleted_workspace_on_destroy (#25624)
• loganalytics - update cluster resource to use hashicorp/go-azure-sdk (#23373)
• Data Source: azurerm_management_group - now exports the tenant_scoped_id attribute (#25555)
• azurerm_container_app - the ingress.ip_security_restriction.ip_address_range property will now accept an IP address as valid input (#25609)
• azurerm_container_group - the identity block can now be updated (#25543)
• azurerm_express_route_connection - support for the private_link_fast_path_enabled property (#25596)
• azurerm_hdinsight_hadoop_cluster - support for the private_link_configuration block (#25629)
• azurerm_hdinsight_hbase_cluster - support for the private_link_configuration block (#25629)
• azurerm_hdinsight_interactive_query_cluster - support for the private_link_configuration block (#25629)
• azurerm_hdinsight_kafka_cluster - support for the private_link_configuration block (#25629)
• azurerm_hdinsight_spark_cluster - support for the private_link_configuration block (#25629)
• azurerm_management_group - now exports the tenant_scoped_id attribute (#25555)
• azurerm_monitor_activity_log_alert - support for the location property (#25389)
• azurerm_mysql_flexible_server - update validating regex for sku_name (#25642)
• azurerm_postgresql_flexible_server - support for the GeoRestore create_mode (#25664)
• azurerm_virtual_network_gateway_connection - support for the private_link_fast_path_enabled property (#25650)
• azurerm_windows_web_app - support for the handler_mapping block (#25631)
• azurerm_windows_web_app_slot - support for the handler_mapping block (#25631)

BUG FIXES:

• storage: prevent a bug causing the second storage account key to be used for authentication instead of the first (#25652)
• azurerm_active_directory_domain_service - prevent an issue where filtered_sync_enabled was not being updated (#25594)
• azurerm_application_insights - add a state migration to fix the resource ID casing of Application Insights resources (#25628)
• azurerm_function_app_hybrid_connection - can now use relay resources created in a different resource group (#25541)
• azurerm_kubernetes_cluster_node_pool - prevent plan diff when the windows_profile.outbound_nat_enabled property is unset (#25644)
• azurerm_machine_learning_compute_cluster - fix location to point to parent resource for computes (#25643)
• azurerm_machine_learning_compute_instance - fix location to point to parent resource for computes (#25643)
• azurerm_storage_account - check replication type when evaluating support level for shares and queues for V1 storage accounts (#25581)
• azurerm_storage_account - added a sanity check for dns_endpoint_type and blob_properties.restore_policy (#25450)
• azurerm_web_app_hybrid_connection - can now use relay resources created in a different resource group (#25541)
• azurerm_windows_web_app - prevent removal of site_config.application_stack.node_version when app_settings are updated (#25488)
• azurerm_windows_web_app_slot - prevent removal of site_config.application_stack.node_version when app_settings are updated (#25489)

DEPRECATIONS:

• logz - the Logz resources are deprecated and will be removed in v4.0 of the AzureRM Provider since the API no longer allows new instances to be created (#25405)
• azurerm_machine_learning_compute_instance - marked the location field as deprecated in v4.0 of the provider (#25643)
• azurerm_kubernetes_cluster - the following properties have been deprecated since the API no longer supports cluster creation with legacy Azure Entra integration: client_app_id, server_app_id, server_app_secret and managed (#25200)

v3.99.0

BREAKING CHANGE:

• azurerm_linux_web_app - site_config.0.application_stack.0.java_version must be specified with java_server and java_server_version (#25553)

ENHANCEMENTS:

• dependencies: updating to v0.20240411.1104331 of github.com/hashicorp/go-azure-sdk/resourcemanager and github.com/hashicorp/go-azure-sdk/sdk (#25546)
• dependencies: updating to v0.26.1 of github.com/tombuildsstuff/giovanni (#25551)
• azurerm_key_vault - deprecate the contact property from v3.x provider and update properties to Computed & Optional (#25552)
• azurerm_key_vault_certificate_contacts - in v4.0 make the contact property optional to allow for deletion of contacts from the key vault (#25552)
• azurerm_signalr_service - support for setting the sku property to Premium_P2 (#25578)
• azurerm_snapshot - support for the network_access_policy and public_network_access_enabled properties (#25421)
• azurerm_storage_account - extend the support level of (blob|queue|share)_properties for Storage kind (#25427)
• azurerm_storage_blob - support for the encryption_scope property (#25551)
• azurerm_storage_container - support for the default_encryption_scope and encryption_scope_override_enabled properties (#25551)
• azurerm_storage_data_lake_gen2_filesystem - support for the default_encryption_scope property (#25551)
• azurerm_subnet - the delegation.x.service_delegation.x.name property now supports Oracle.Database/networkAttachments (#25571)
• azurerm_web_pubsub - support setting the sku property to Premium_P2 (#25578)

BUG FIXES:

• provider: fix an issue where the provider was not correctly configured when using a custom metadata host (#25546)
• storage: fix a number of potential crashes during plan/apply with resources using the Storage data plane API (#25525)
• azurerm_application_insights - fix issue where the wrong Application ID was set into the property app_id (#25520)
• azurerm_application_insights_api_key - add a state migration to re-case static segments of the resource ID (#25567)
• azurerm_container_app_environment_certificate - the subject_name attribute is now correctly populated (#25516)
• azurerm_function_app_slot - will now taint the resource when partially created (#24520)
• azurerm_linux_function_app - will now taint the resource when partially created (#24520)
• azurerm_managed_disk - filtering the Resource SKUs response to reduce the memory overhead, when determining whether a Managed Disk can be online resized or not (#25549)
• azurerm_monitor_alert_prometheus_rule_group - the severity property is now set correctly when 0 (#25408)
• azurerm_monitor_smart_detector_alert_rule - normalising the value for id within the action_group block (#25559)
• azurerm_redis_cache_access_policy_assignment - the object_id_alias property now allows usernames (#25523)
• azurerm_windows_function_app - will not taint the resource when partially created (#24520)
• azurerm_windows_function_app - will not taint the resource when partially created (#24520)

DEPRECATIONS:

• azurerm_cosmosdb_account - the connection_strings property has been superseded by the primary and secondary connection strings for sql, mongodb and readonly (#25510)
• azurerm_cosmosdb_account - the enable_free_tier property has been superseded by free_tier_enabled (#25510)
• azurerm_cosmosdb_account - the enable_multiple_write_locations property has been superseded by multiple_write_locations_enabled (#25510)
• azurerm_cosmosdb_account - the enable_automatic_failover property has been superseded by automatic_failover_enabled (#25510)