v2.25.0

2.25.0 (August 27, 2020)

UPGRADE NOTES:

• azurerm_container_group - The secure_environment_variables field within the container now maps keys with empty values, which differs from previous versions of this provider which ignored empty values (#8151)

FEATURES:

• New Resource azurerm_spring_cloud_certificate (#8067)

IMPROVEMENTS:

• dependencies: updating keyvault to 2019-09-01 (#7822)
• azurerm_app_service_slot_virtual_network_swift_connection - adding validation that the app_service_id is an App Service / Function App ID (#8111)
• azurerm_app_service_slot_virtual_network_swift_connection - adding validation that the subnet is a Subnet ID (#8111)
• azurerm_batch_pool - Remove network_configuration from update payload (#8189)
• azurerm_frontdoor_firewall_policy - match_variable within the match_condition block can now be set to SocketAddr (#8244)
• azurerm_linux_virtual_machine_scale_set - upgrade_mode="Automatic" no longer requires health probe (#6667)
• azurerm_key_vault - support for soft_delete_retention_days (#7822)
• azurerm_shared_image - Support for purchase_plan (#8124)
• azurerm_shared_image_gallery - validating at import time that the ID is for a Shared Image Gallery (#8240)
• azurerm_windows_virtual_machine_scale_set - upgrade_mode="Automatic" no longer requires health probe (#6667)

BUG FIXES:

• Data Source: azurerm_app_service - ensuring the site_config block is correctly set into the state (#8212)
• Enhanced Validation: supporting "centralindia", "southindia" and "westindia" as valid regions in Azure Public (working around invalid data from the Azure API) (#8217)
• azurerm_application_gateway - allow setting ip_addresses within the backend_address_pool block to an empty list (#8210)
• azurerm_application_gateway - adding validation to the zone field (#8233)
• azurerm_container_group - the secure_environment_variables field within the container now maps keys with empty values (#8151)
• azurerm_dedicated_host - waiting for the resource to be gone 20 times rather than 10 to work around an API issue (#8221)
• azurerm_dedicated_host_group - adding validation to the zone field (#8233)
• azurerm_firewall - adding validation to the zone field (#8233)
• azurerm_hardware_security_module - adding validation to the zone field (#8233)
• azurerm_lb - adding validation to the zone field (#8233)
• azurerm_linux_virtual_machine - support for updating ultra_ssd_enabled within the additional_capabilities block without recreating the virtual machine (#8015)
• azurerm_linux_virtual_machine_scale_set - adding validation to the zone field (#8233)
• azurerm_managed_disk - adding validation to the zone field (#8233)
• azurerm_nat_gateway - adding validation to the zone field (#8233)
• azurerm_orchestrated_virtual_machine_scale_set - adding validation to the zone field (#8233)
• azurerm_public_ip_prefix - adding validation to the zone field (#8233)
• azurerm_public_ip - adding validation to the zone field (#8233)
• azurerm_redis_cache - adding validation to the zone field (#8233)
• azurerm_virtual_machine - adding validation to the zone field (#8233)
• azurerm_virtual_machine_scale_set - adding validation to the zone field (#8233)
• azurerm_windows_virtual_machine - support for updating ultra_ssd_enabled within the additional_capabilities block without recreating the virtual machine (#8015)
• azurerm_windows_virtual_machine_scale_set - adding validation to the zone field (#8233)

v2.24.0

2.24.0 (August 20, 2020)

FEATURES:

• New Resource: azurerm_synapse_spark_pool (#7886)

IMPROVEMENTS:

• dependencies: update containerinstance to API version 2019-12-01 (#8110)
• azurerm_api_management_api - now supports oauth2_authorization and openid_authentication (#7617)
• azurerm_policy_definition - mode can now be updated without recreating the resource (#7976)

BUG FIXES:

• azurerm_frontdoor - ensuring all fields are set into the state (#8146)
• azurerm_frontdoor - rewriting case-inconsistent Resource ID's to ensure they're reliable (#8146)
• azurerm_frontdoor_firewall_policy - ensuring all fields are set into the state (#8146)
• azurerm_frontdoor_firewall_policy - rewriting case-inconsistent Resource ID's to ensure they're reliable (#8146)
• azurerm_frontdoor_custom_https_configuration - ensuring all fields are set into the state (#8146)
• azurerm_frontdoor_custom_https_configuration - ensuring the resource_group_name field is set into the state (#8173)
• azurerm_frontdoor_custom_https_configuration - rewriting case-inconsistent Resource ID's to ensure they're reliable (#8146)
• azurerm_frontdoor_custom_https_configuration - updating the ID to use the frontendEndpoint's Resource ID rather than a custom Resource ID (#8146)
• azurerm_lb - switching to use API version 2020-03-01 to workaround a bug in API version 2020-05-01 (#8006)
• azurerm_lb_backend_address_pool - adding more specific validation for the Load Balancer ID field (#8172)
• azurerm_lb_backend_address_pool - ensuring all fields are always set into the state (#8172)
• azurerm_lb_backend_address_pool - switching to use API version 2020-03-01 to workaround a bug in API version 2020-05-01 (#8006)
• azurerm_lb_nat_pool - adding more specific validation for the Load Balancer ID field (#8172)
• azurerm_lb_nat_pool - ensuring all fields are always set into the state (#8172)
• azurerm_lb_nat_pool - switching to use API version 2020-03-01 to workaround a bug in API version 2020-05-01 (#8006)
• azurerm_lb_nat_rule - adding more specific validation for the Load Balancer ID field (#8172)
• azurerm_lb_nat_rule - ensuring all fields are always set into the state (#8172)
• azurerm_lb_nat_rule - switching to use API version 2020-03-01 to workaround a bug in API version 2020-05-01 (#8006)
• azurerm_lb_outbound_rule - adding more specific validation for the Load Balancer ID field (#8172)
• azurerm_lb_outbound_rule - ensuring all fields are always set into the state (#8172)
• azurerm_lb_outbound_rule - switching to use API version 2020-03-01 to workaround a bug in API version 2020-05-01 (#8006)
• azurerm_lb_probe - adding more specific validation for the Load Balancer ID field (#8172)
• azurerm_lb_probe - ensuring all fields are always set into the state (#8172)
• azurerm_lb_probe - switching to use API version 2020-03-01 to workaround a bug in API version 2020-05-01 (#8006)
• azurerm_lb_rule - adding more specific validation for the Load Balancer ID field (#8172)
• azurerm_lb_rule - ensuring all fields are always set into the state (#8172)
• azurerm_lb_rule - switching to use API version 2020-03-01 to workaround a bug in API version 2020-05-01 (#8006)
• azurerm_storage_account - only sending allow_blob_public_access and min_tls_version in Azure Public since these are currently not supported in other regions (#8148)

v2.23.0

2.23.0 (August 13, 2020)

FEATURES:

• New Resource: azurerm_integration_service_environment (#7763)
• New Resource: azurerm_redis_linked_server (#8026)
• New Resource: azurerm_synapse_firewall_rule (#7904)

IMPROVEMENTS:

• Data Source: azurerm_app_service now exports source_control configuration (#7945)
• Data Source: azurerm_function_app now exports source_control configuration (#7945)
• Data Source: azurerm_function_app now exports site_config configuration (#7945)
• azurerm_app_service now supports source_control configuration (#7945)
• azurerm_function_app now supports source_control configuration (#7945)
• azurerm_function_app now supports full ip_restriction configuration (#7945)
• azurerm_function_app now supports full scm_ip_restriction configuration (#7945)
• azurerm_site_recovery_replicated_vm - support setting target_network_id and network_interface on failover (#5688)
• azurerm_storage_account - support static_website for BlockBlobStorage account type (#7890)
• azurerm_storage_account - filter allow_blob_public_access and min_tls_version from Azure US Government (#8092)

ENHANCEMENTS:

• dependencies: updating containerservice to 2020-04-01 (#7894)
• dependencies: updating mysql to 2020-01-01 (#8062)
• dependencies: updating postgresql to 2020-01-01 (#8045)
• azurerm_eventhub_namespace - support for the identity block (#8065)
• azurerm_postgresql_server - support for the identity block (#8044)

BUG FIXES:

• All resources using a location field - allowing the value global when using enhanced validation (#8042)
• Data Source: azurerm_api_management_user - user_id now accepts single characters (#7975)
• azurerm_application_gateway - enforce case for the rule_type property (#8061)
• azurerm_iothub_consumer_group - lock during creation and deletion to workaround an API issue (#8041)
• azurerm_iothub - the endpoint and route lists can now be cleared by setting them to [] (#8028)
• azurerm_linux_virtual_machine - handling machines which are already stopped/deallocated (#8000)
• azurerm_mariadb_virtual_network_rule will now work across subscriptions (#8100)
• azurerm_monitor_metric_alert_resource - continue using SingleResourceMultiMetricCriteria for existing alerts (#7995)
• azurerm_mysql_server - prevent a non empty plan when using threat_detection_policy (#7981)
• azurerm_orchestrated_virtual_machine_scale_set - allow single_placement_group to be true (#7821)
• azurerm_mysql_server - support for the identity block (#8059)
• azurerm_traffic_manager_profile - updating no longer clears all endpoints (#7846)
• azurerm_windows_virtual_machine - handling machines which are already stopped/deallocated [#8000]'
• azurerm_data_factory_dataset_delimited_text - fix issue with property azure_blob_storage_account (#7953)

v2.22.0

DEPENDENCIES:

• updating github.com/Azure/azure-sdk-for-go to v44.2.0 (#7933)

IMPROVEMENTS:

• azurerm_cosmosdb_account - support DisableRateLimitingResponses with the capabilities property (#8016)
• azurerm_storage_account - support for the min_tls_version property (#7879)
• azurerm_storage_account_sas - support for the signed_version attribute property (#8020)
• azurerm_servicebus_queue - support for the enable_batched_operations, status, forward_to, and forward_dead_lettered_messages_to (#7990)

BUG FIXES:

• Data Source: azurerm_key_vault_certificate - fixing a crash when using acmebot certificates (#8029)
• azurerm_iothub_shared_access_policy - prevent primary_connection_string & secondary_connection_string from regenerating during every apply (#8017)

v2.21.0

2.21.0 (July 31, 2020)

DEPENDENCIES:

• updating search to 2020-03-13 (#7867)
• updating go-azure-helpers to v0.11.2 (#7911)

FEATURES:

• New Data Source: azurerm_data_share_dataset_data_lake_gen1 (#7840)
• New Resource: azurerm_dedicated_hardware_security_module (#7727)

IMPROVEMENTS:

• azurerm_api_management_identity_provider_aad - Support for signin_tenant (#7901)
• azurerm_app_service_plan - update the relation between kind and reserved (#7943)
• azurerm_automation_runbook - recreate azurerm_automation_job_schedule after an update (#7555)
• azurerm_app_service_slot - support for the application_logs.file_system (#7311)
• azurerm_firewall - no longer requires a zone (#7817)
• azurerm_function_app_slot - support for the site_config.auto_swap_slot_name property (#7859)
• azurerm_kubernetes_cluster - support for in-place upgrade from Free to Paid for sku_tier (#7927)
• azurerm_monitor_scheduled_query_rules_alert - action.0.custom_webhook_payload is now sent as empty to allow for Azure's default to take effect(#7838)
• azurerm_search_service - support for the public_network_access_enabled property (#7867)
• azurerm_servicebus_subscription - support for the status property (#7852)

BUG FIXES:

• azurerm_automation_runbook - allow publish_content_link resource to not be set (#7824)
• azurerm_api_management_named_value - the value has been marked as sensitive to hide secret values (#7819)
• azurerm_cognitive_account - allow qname_runtime_endpoint to not be set (#7916)
• azurerm_iothub_dps - the only valid value for the sku property for the API is now S1 (#7847)
• azurerm_eventgrid_event_subscription - deprecate the topic_name as it is now readonly in the API (#7871)
• azurerm_kubernetes_cluster - updates will no longer fail when using managed AAD integration (#7874)

v2.20.0

2.20.0 (July 23, 2020)

UPGRADE NOTES

• Enhanced Validation for Locations - the Azure Provider now validates that the value for the location argument is a supported Azure Region within the Azure Environment being used (from the Azure Metadata Service) - which allows us to catch configuration errors for this field at terraform plan time, rather than during a terraform apply. This functionality is now enabled by default, and can be opted-out of by setting the Environment Variable ARM_PROVIDER_ENHANCED_VALIDATION to false
• azurerm_storage_account - will now default allow_blob_public_access to false to align with the portal and be secure by default (#7784)

DEPENDENCIES:

• updating github.com/Azure/azure-sdk-for-go to v44.1.0 (#7774)
• updating cosmos to 2020-04-01 (#7597)

FEATURES:

• New Data Source: azurerm_synapse_workspace (#7517)
• New Resource: azurerm_data_share_dataset_data_lake_gen1 - add dataset_data_lake_gen1 suppport for azurerm_data_share (#7511)
• New Resource: azurerm_frontdoor_custom_https_configuration - move the front door custom_https_configuration to its own resource to allow for parallel creation/update of custom https certificates. (#7498)
• New Resource: azurerm_kusto_cluster_customer_managed_key (#7520)
• New Resource: azurerm_synapse_workspace (#7517)

ENHANCEMENTS:

• azurerm_cosmos_db_account - add support for enable_free_tier (#7814)

BUG FIXES

• Data Source: azurerm_private_dns_zone - fix a crash when the zone does not exist (#7783)
• azurerm_application_gateway - fix crash with gateway_ip_configuration (#7789)
• azurerm_cosmos_account - the geo_location.prefix property has been deprecated as service no longer accepts it as an input since Apr 25, 2019 (#7597)
• azurerm_monitor_autoscale_setting - Fix crash in notification (#7835)
• azurerm_storage_account - will now default allow_blob_public_access to false to align with the portal and be secure by default (#7784)

v2.19.0

2.19.0 (July 16, 2020)

UPGRADE NOTES:

• HDInsight 3.6 will be retired (in Azure Public) on 2020-12-30 - HDInsight 4.0 does not support ML Services, RServer or Storm Clusters - as such the azurerm_hdinsight_ml_services_cluster, azurerm_hdinsight_rserver_cluster and azurerm_hdinsight_storm_cluster resources are deprecated and will be removed in the next major version of the Azure Provider. (#7706)
• provider: no longer auto register the Microsoft.StorageCache RP (#7768)

FEATURES:

• New Data source: azurerm_route_filter (#6341)
• New Resource: azurerm_route_filter (#6341)

ENHANCEMENTS:

• dependencies: updating to v44.0.0 of github.com/Azure/azure-sdk-for-go (#7616)
• dependencies: updating the machinelearning API to version 2020-04-01 (#7703)
• Data Source: azurerm_storage_account - exposing allow_blob_public_access (#7739)
• Data Source: azurerm_dns_zone - now provides feedback if a resource_group_name is needed to resolve ambiguous zone (#7680)
• azurerm_automation_schedule - Updated validation for timezone strings (#7754)
• azurerm_express_route_circuit_peering - support for the route_filter_id property (#6341)
• azurerm_kubernetes_cluster - no longer sending the kubernetes_dashboard addon in Azure China since this is not supported in this region (#7714)
• azurerm_local_network_gateway- address_space order can now be changed (#7745)
• azurerm_machine_learning_workspace - adding the field high_business_impact (#7703)
• azurerm_monitor_metric_alert - support for multiple scopes and associated criteria (#7159)
• azurerm_mssql_database elastic_pool_id remove forcenew (#7628)
• azurerm_policy_assignment - support for metadata property (#7725)
• azurerm_policy_set_definition - support for the policy_definition_reference_id property (#7018)
• azurerm_storage_account - support for configuring allow_blob_public_access (#7739)
• azurerm_storage_container - container creation will retry if a container of the same name has not completed it's delete operation (#7179)
• azurerm_storage_share - share creation will retry if a share of the same name has not completed it's previous delete operation (#7179)
• azurerm_virtual_network_gateway_connection - support for the traffic_selector_policy block (#6586)
• azurerm_orchestrated_virtual_machine_scale_set - support for the proximity_placement_group_id property (#7510)

BUG FIXES:

• provider: deprecating metadata_url to metadata_host since this is a hostname (#7740)
• azurerm_*_virtual_machine - allow_extensions_operations can now be updated (#7749)
• azurerm_eventhub_namespace - changing to zone_redundant now force a new resource (#7612)
• azurerm_express_route_circuit - fix eventual consistency issue in create (#7753)
• azurerm_express_route_circuit - fix potential crash (#7776)
• azurerm_managed_disk - allow up to 65536 GB for the disk_size_gb property (#7689)
• azurerm_machine_learning_workspace - waiting until the Machine Learning Workspace has been fully deleted (#7635)
• azurerm_mysql_server - ssl_minimal_tls_version_enforced now correctly set in updates (#7307)
• azurerm_notification_hub - validating that the ID is in the correct format when importing the resource (#7690)
• azurerm_redis_cache - fixing a bug when provisioning with authentication disabled (#7734)
• azurerm_virtual_hub - the field address_prefix is now ForceNew to match the behaviour of the Azure API (#7713)
• azurerm_virtual_hub_connection - using the delete timeout if specified (#7731)

v2.18.0

2.18.0 (July 10, 2020)

FEATURES:

• metadata_url can be set at the provider level to use an environment provided by a specific url (#7664)
• New Data Source: azurerm_key_vault_certificate_issuer (#7074)
• New Data Source: azurerm_web_application_firewall_policy (#7469)
• New Resource: azurerm_automation_connection (#6847)
• New Resource: azurerm_automation_connection_certificate (#6847)
• New Resource: azurerm_automation_connection_classic_certificate (#6847)
• New Resource: azurerm_automation_connection_service_pricipal (#6847)
• New Resource: azurerm_app_service_slot_virtual_network_swift_connection (#5916)
• New Resource: azurerm_data_factory_dataset_azure_blob (#6366)
• New Resource: azurerm_data_factory_dataset_cosmosdb_sqlapi (#6366)
• New Resource: azurerm_data_factory_dataset_delimited_text (#6366)
• New Resource: azurerm_data_factory_dataset_http (#6366)
• New Resource: azurerm_data_factory_dataset_json (#6366)
• New Resource: azurerm_data_factory_linked_service_azure_blob_storage (#6366)
• New Resource: azurerm_data_factory_linked_service_azure_file_storage (#6366)
• New Resource: azurerm_data_factory_linked_service_azure_file_storage (#6366)
• New Resource: azurerm_data_factory_linked_service_cosmosdb (#6366)
• New Resource: azurerm_data_factory_linked_service_sftp (#6366)
• New Resource: azurerm_data_factory_linked_service_sftp (#6366)
• New Resource: azurerm_key_vault_certificate_issuer (#7074)
• New Resource: azurerm_kusto_attached_database_configuration (#7377)
• New Resource: azurerm_kusto_database_principal_assignment (#7484)
• New Resource: azurerm_mysql_active_directory_administrator (#7621)

ENHANCEMENTS:

• dependencies: updating github.com/tombuildsstuff/giovanni to v0.11.0 (#7608)
• dependencies: updating network to 2020-05-01 (#7585)
• Data Source: azurerm_eventhub_namespace - exposing the dedicated_cluster_id field (#7548)
• azurerm_cosmosdb_account - support for the ignore_missing_vnet_service_endpoint property (#7348)
• azurerm_application_gateway - support for the firewall_policy_id attribute within the http_listener block (#7580)
• azurerm_eventhub_namespace - support for configuring the dedicated_cluster_id field (#7548)
• azurerm_eventhub_namespace - support for setting partition_count to 1024 when using a Dedicated Cluster (#7548)
• azurerm_eventhub_namespace - support for setting retention_count to 90 when using a Dedicated Cluster (#7548)
• azurerm_hdinsight_hadoop_cluster - now supports Azure Monitor (#7045)
• azurerm_hdinsight_hbase_cluster - now supports external metastores (#6969)
• azurerm_hdinsight_hbase_cluster - now supports Azure Monitor (#7045)
• azurerm_hdinsight_interactive_query_cluster - now supports external metastores (#6969)
• azurerm_hdinsight_interactive_query_cluster - now supports Azure Monitor (#7045)
• azurerm_hdinsight_kafka_cluster - now supports external metastores (#6969)
• azurerm_hdinsight_kafka_cluster - now supports external Azure Monitor (#7045)
• azurerm_hdinsight_spark_cluster - now supports external metastores (#6969)
• azurerm_hdinsight_spark_cluster - now supports external Azure Monitor (#7045)
• azurerm_hdinsight_storm_cluster - now supports external metastores (#6969)
• azurerm_hdinsight_storm_cluster - now supports external Azure Monitor (#7045)
• azurerm_policy_set_definition - the management_group_id property has been deprecated in favour of management_group_name to align with the behaviour in azurerm_policy_definition (#6943)
• azurerm_kusto_cluster - support for the language_extensions property (#7421)
• azurerm_kusto_cluster - Support for the optimized_auto_scale property (#7371)
• azurerm_mysql_server - support for the threat_detection_policy property (#7156)
• azurerm_mssql_database - the sku_name property now only forces a new resource for the HS (HyperScale) family (#7559)
• azurerm_web_application_firewall_policy - allow setting version to 0.1 (for when type is set to Microsoft_BotManagerRuleSet) (#7579)
• azurerm_web_application_firewall_policy - support the transforms property in the custom_rules.match_conditions block (#7545)
• azurerm_web_application_firewall_policy - support the request_body_check, file_upload_limit_in_mb, and max_request_body_size_in_kb properties in the policy_settings block (#7363)

BUG FIXES:

• azurerm_api_management_api_operation_policy - correctly parse XLM (#7345)
• azurerm_application_insights_api_key - now correctly checks if the resource exists upon creation (#7650)
• azurerm_api_management_identity_provider_aad - fix perpetual diff on the client_secret property (#7529)
• azurerm_eventhub_namespace_authorization_rule - correctly update old resource IDs (#7622)
• azurerm_policy_remediation - removing the validation for the policy_definition_reference_id field since this isn't a Resource ID (#7600)
• azurerm_storage_data_lake_gen2_filesystem - prevent a crash during plan if storage account was deleted (#7378)

v2.17.0

2.17.0 (July 03, 2020)

UPGRADE NOTES:

• azurerm_hdinsight_hadoop_cluster - the enabled property within the gateway block now defaults to true and cannot be disabled, due to a behavioural change in the Azure API (#7111)
• azurerm_hdinsight_hbase_cluster - the enabled property within the gateway block now defaults to true and cannot be disabled, due to a behavioural change in the Azure API (#7111)
• azurerm_hdinsight_interactive_query_cluster - the enabled property within the gateway block now defaults to true and cannot be disabled, due to a behavioural change in the Azure API (#7111)
• azurerm_hdinsight_kafka_cluster - the enabled property within the gateway block now defaults to true and cannot be disabled, due to a behavioural change in the Azure API (#7111)
• azurerm_hdinsight_ml_services_cluster - the enabled property within the gateway block now defaults to true and cannot be disabled, due to a behavioural change in the Azure API (#7111)
• azurerm_hdinsight_rserver_cluster - the enabled property within the gateway block now defaults to true and cannot be disabled, due to a behavioural change in the Azure API (#7111)
• azurerm_hdinsight_spark_cluster - the enabled property within the gateway block now defaults to true and cannot be disabled, due to a behavioural change in the Azure API (#7111)
• azurerm_hdinsight_storm_cluster - the enabled property within the gateway block now defaults to true and cannot be disabled, due to a behavioural change in the Azure API (#7111)

FEATURES:

• New Resource: azurerm_kusto_cluster_principal_assignment (#7533)

ENHANCEMENTS:

• dependencies: updating to v43.2.0 of github.com/Azure/azure-sdk-for-go (#7546)
• Data Source: azurerm_eventhub_namespace - exposing the zone_redundant property (#7534)
• Data Source: azurerm_postgresql_server - exposing sku_name (#7523)
• azurerm_app_service_environment - the property user_whitelisted_ip_ranges has been deprecated and renamed to allowed_user_ip_cidrs to clarify the function and expected format (#7499)
• azurerm_eventhub_namespace - support for the zone_redundant property (#7534)
• azurerm_key_vault_certificate - exposing the certificate_attribute block (#7387)
• azurerm_sentinel_alert_rule_ms_security_incident - the property text_whitelist has been deprecated and renamed to display_name_filter to better match the api (#7499)
• azurerm_shared_image - support for specialized images via the specialized property (#7277)
• azurerm_shared_image_version - support for specialized images via the specialized property (#7277)
• azurerm_spring_cloud_service - support for sku_name (#7531)
• azurerm_spring_cloud_service - support for the trace block (#7531)

BUG FIXES:

• azurerm_api_management_named_value - polling until the property is fully created (#7547)
• azurerm_api_management_property - polling until the property is fully created (#7547)
• azurerm_linux_virtual_machine_scale_set - using the provider feature roll_instances_when_required when upgrade_mode is set to Manual (#7513)
• azurerm_marketplace_agreement - fix issue around import (#7515)
• azurerm_windows_virtual_machine_scale_set - using the provider feature roll_instances_when_required when upgrade_mode is set to Manual (#7513)

v2.16.0

DEPENDENCIES:

• updating github.com/Azure/go-autorest/azure/cli to v0.3.1 (#7433)

FEATURES:

• New Resource: azurerm_postgresql_active_directory_administrator (#7411)

ENHANCEMENTS:

• authentication: Azure CLI - support for access tokens in custom directories (#7433)
• azurerm_api_management_api - support for the subscription_required property (#4885)
• azurerm_app_service_environment - support a value of Web, Publishing for the internal_load_balancing_mode property (#7346)
• azurerm_kusto_cluster - support for the identity block (#7367)
• azurerm_kusto_cluster - support for virtual_network_configuration block (#7369)
• azurerm_kusto_cluster - supoport for the zone property (#7373)
• azurerm_firewall - support for configuring threat_intel_mode (#7437)
• azurerm_management_group - waiting until the Management Group has been fully replicated after creating (#7473)
• azurerm_monitor_activity_log_alert - support for the fields recommendation_category, recommendation_impact and recommendation_type in the criteria block (#7458)
• azurerm_mssql_database - support up to 5 for the min_capacity property (#7457)
• azurerm_mssql_database - support GP_S_Gen5 SKUs up to GP_S_Gen5_40 (#7453)

BUG FIXES:

• azurerm_api_management_api - allowing dots as a prefix of the name field (#7478)
• azurerm_function_app - state fixes for app_settings (#7440)
• azurerm_hdinsight_hadoop_cluster - fixes for node and instance count validation (#7430)
• azurerm_hdinsight_hbase_cluster - fixes for node and instance count validation (#7430)
• azurerm_hdinsight_interactive_query_cluster - fixes for node and instance count validation (#7430)
• azurerm_hdinsight_kafka_cluster - fixes for node and instance count validation (#7430)
• azurerm_hdinsight_ml_services_cluster - fixes for node and instance count validation (#7430)
• azurerm_hdinsight_rserver_cluster - fixes for node and instance count validation (#7430)
• azurerm_hdinsight_spark_cluster - fixes for node and instance count validation (#7430)
• azurerm_hdinsight_storm_cluster - fixes for node and instance count validation (#7430)
• azurerm_monitor_autoscale_settings - support for setting time_aggregation to Last as per the documentation (#7480)
• azurerm_postgresql_server - can now update the tier of sku_name by recreating the resource (#7456)
• azurerm_network_interface_security_group_association - is now considered delete whtn the network interfact is notfound (#7459)
• azurerm_role_definition - terraform import now sets scope to prevent a force recreate (#7424)
• azurerm_storage_account_network_rules - corretly clear ip_rules, virtual_network_subnet_ids when set to [] (#7385)