v4.21.1

BUG FIXES:

• azurerm_mssql_server - prevent panic by checking if administrator_login exists in the raw config map (#28909)

v3.117.1

SPECIAL NOTES: This 3.x.x patch release is a special, one-off, back-port of an API upgrade for the azurerm_kubernetes_cluster_trusted_access_role_binding resource to enable users still on 3.x to continue using this resource.

BUG FIXES:

• dependencies: azurerm_kubernetes_cluster_trusted_access_role_binding - upgrade API to 2024-05-01 (#28910)

v4.21.0

NOTES:

• The azurerm_mssql_job_credential resource now supports the password_wo write-only argument
• The azurerm_mssql_server resource now supports the administrator_login_password_wo write-only argument
• The azurerm_mysql_flexible_server resource now supports the administrator_password_wo write-only argument
• The azurerm_postgresql_flexible_server resource now supports the administrator_password_wo write-only argument
• The azurerm_postgresql_server resource now supports the administrator_login_password_wo write-only argument

FEATURES:

• New Resource: azurerm_linux_function_app_flex_consumption (#28199)
• New Resource: azurerm_network_manager_verifier_workspace (#28754)

ENHANCEMENTS:

• dependencies: azurerm_kubernetes_cluster_trusted_access_role_binding - update API version to 2024-05-01 (#28853)
• dependencies: desktopvirtualization - update API version to 2024-04-03 (#28771)
• dependencies: kusto - update API version to 2024-04-13 (#28685)
• dependencies: redis - update API version to 2024-11-01 (#28696)
• dependencies: workloads - update API version to 2024-09-01 (#28825)
• azurerm_fluid_relay_server - fix versionless_id support for key_vault_key_id (#28864)
• azurerm_kubernetes_cluster - add support for the upgrade_override_setting property (#27962)
• azurerm_kusto_cluster_principal_assignment - add support for AllDatabaseMonitor role type (#28685)
• azurerm_linux_function_app - correctly update WEBSITE_CONTENTSHARE and WEBSITE_CONTENTAZUREFILECONNECTIONSTRING when changed in app_settings (#28859)
• azurerm_linux_function_app_slot - correctly update WEBSITE_CONTENTSHARE and WEBSITE_CONTENTAZUREFILECONNECTIONSTRING when changed in app_settings (#28859)
• azurerm_linux_web_app - add support for Node Version 22 (#28840)
• azurerm_linux_web_app_slot - add support for Node Version 22 (#28840)
• azurerm_logic_app_standard - add support for the vnet_content_share_enabled property (#28879)
• azurerm_mssql_job_credential - add support for the password_wo and password_wo_version properties (#28808)
• azurerm_mssql_managed_instance - add support for the database_format and hybrid_secondary_usage properties (#28248)
• azurerm_mssql_server - add support for the administrator_login_password_wo and administrator_login_password_wo_version properties (#28818)
• azurerm_mysql_flexible_server - add support for the administrator_password_wo and administrator_password_wo_version properties (#28799)
• azurerm_postgresql_flexible_server - add support for the administrator_password_wo and administrator_password_wo_version properties (#28857)
• azurerm_postgresql_server - add support for the administrator_login_password_wo and administrator_login_password_wo_version properties (#28856)
• azurerm_service_plan - add support for the I1mv2, I2mv2, I3mv2, I4mv2, I5mv2 skus (#28316)
• azurerm_servicebus_namespace - split create/update functions (#28539)
• azurerm_storage_account - nested attributes in immutability_policy can now be updated (#28122)
• azurerm_windows_function_app - correctly update WEBSITE_CONTENTSHARE and WEBSITE_CONTENTAZUREFILECONNECTIONSTRING when changed in app_settings (#28859)
• azurerm_windows_function_app_slot - correctly update WEBSITE_CONTENTSHARE and WEBSITE_CONTENTAZUREFILECONNECTIONSTRING when changed in app_settings (#28859)

BUG FIXES:

• azurerm_key_vault_secret - recreate the resource if expiration_date is removed after having been set (#28494)
• azurerm_log_analytics_cluster_customer_managed_key - fix error due to read-only property included in request payload during create/update/delete operations (#28862)
• azurerm_log_analytics_cluster_customer_managed_key - remove resource from state when deleted outside of Terraform (#28862)
• azurerm_log_analytics_cluster_customer_managed_key - fix resource delete function (#28862)
• azurerm_security_center_pricing - updating subplan now recreates the resource to work around API behaviour that enables certain settings on updated (#27805)
• azurerm_windows_web_app - fix change detection for tomcat_version (#28842)

v4.20.0

FEATURES:

• New Data Source: azurerm_dynatrace_monitor (#28381)
• New Resource: azurerm_data_protection_backup_vault_customer_managed_key (#28679)

ENHANCEMENTS:

• dependencies: hashicorp/terraform-plugin-sdk/v2 - update to v2.36.0 (#28788)
• dependencies: azurerm_data_factory_pipeline - update to use hashicorp/go-azure-sdk (#28768)
• Data Source: azurerm_logic_app_standard - add support for the ftp_publish_basic_authentication_enabled and scm_publish_basic_authentication_enabled properties (#28763)
• azurerm_logic_app_standard - add support for the ftp_publish_basic_authentication_enabled and scm_publish_basic_authentication_enabled properties (#28763)
• azurerm_pim_active_role_assignment - add support for Azure RBAC conditions (#27947)
• azurerm_storage_container - add support for migrating from deprecated storage_account_name to storage_account_id (#28784)
• azurerm_storage_share - add support for migrating from deprecated storage_account_name to storage_account_id (#28784)
• azurerm_storage_table - add attribute resource_manager_id (#28809)
• azurerm_windows_function_app - add support for node ~22 (#28815)
• azurerm_windows_function_app_slot - add support for node ~22 (#28815)

BUG FIXES:

• Data Source: azurerm_container_app - add missing ingress.client_certificate_mode property that caused an error when retrieving data (#28793)
• azurerm_data_factory_pipeline - fix error when unmarshaling the headers for a web activity (#28768)
• azurerm_mssql_virtual_machine - fix an issue that prevented users from using values only known during apply as the value for auto_backup.encryption_password (#28223)

v4.19.0

FEATURES:

• New Data Source: azurerm_stack_hci_storage_path (#28602)
• New Resource: azurerm_ai_foundry (#27424)
• New Resource: azurerm_ai_foundry_project (#27424)
• New Resource: azurerm_mssql_job_step (#28691)
• New Resource: azurerm_netapp_volume_group_oracle (#28391)
• New Resource: azurerm_virtual_machine_scale_set_standby_pool (#28441)

ENHANCEMENTS:

• dependencies: hashicorp/go-azure-sdk update to v0.20250213.1092825 (#28767)
• dependencies: sentinel partial update to 2023-12-01-preview (#28195)
• Data Source: azurerm_app_configuration - add support for the data_plane_proxy_authentication_mode and data_plane_proxy_private_link_delegation_enabled properties (#28712)
• azurerm_app_configuration - add support for the data_plane_proxy_authentication_mode and data_plane_proxy_private_link_delegation_enabled properties (#28712)
• azurerm_container_app - add support for the client_certificate_mode property (#28523)
• azurerm_cdn_frontdoor_firewall_policy - add support for JSChallenge for custom rules (#28717)
• azurerm_express_route_circuit - add support for the rate_limiting_enabled property (#28659)
• azurerm_mssql_managed_instance_failover_group - add support for secondary_type (#28633)
• azurerm_sentinal_alert_rule_scheduled - increase combined limit of entity_mapping and sentinal_entity_mapping to 10 (#28195)
• azurerm_service_plan - support for premium_plan_auto_scale_enabled (#28524)

BUG FIXES:

• azurerm_cdn_frontdoor_firewall_policy - fixed issue where the js_challenge_cookie_expiration_in_minutes policies default value caused Standard_AzureFrontDoor skus to receive a BadRequest error (#28726)
• azurerm_servicebus_topic - prevent perma diff when provisioning a partitioned topic within a non-partitioned namespace (#26680)
• azurerm_linux_function_app - will no longer plan when site_config.0.cors is the default value (#28703)
• azurerm_linux_function_app_slot - fix issue where site_config.0.elastic_instance_minimum was not being set (#28725)
• azurerm_linux_web_app - will no longer plan when site_config.0.cors is the default value (#28703)
• azurerm_postgresql_flexible_server_virtual_endpoint - allow source_server_id and replica_server_id to reference the same server (#28733)
• azurerm_windows_function_app - will no longer plan when site_config.0.cors is the default value (#28703)
• azurerm_windows_function_app_slot - fix issue where site_config.0.elastic_instance_minimum was not being set (#28725)
• azurerm_windows_web_app - will no longer plan when site_config.0.cors is the default value (#28703)

v4.18.0

ENHANCEMENTS:

• dependencies: appconfiguration - update to API version 2024-05-01 (#28700)
• dependencies: update azurerm_cdn_frontdoor_rule to API version 2024-02-01 (#28308)
• dependencies: update azurerm_cdn_frontdoor_ruleset to API version 2024-02-01 (#28308)
• dependencies: update go-azure-sdk to v0.20250131.1134653 (#28674)
• Data Source: azurerm_cdn_frontdoor_firewall_policy - add support for js_challenge_cookie_expiration_in_minutes policy (#28284)
• Data Source: azurerm_nginx_configuration - add support for the protected_file.content_hash property (#28532)
• azurerm_cdn_frontdoor_firewall_policy - add support for js_challenge_cookie_expiration_in_minutes policy (#28284)
• azurerm_cdn_frontdoor_firewall_policy - add support for JSChallenge action type in the managed_rule override block (#28308)
• azurerm_container_app - add support for the volume_mounts.sub_path property (#27533)
• azurerm_nginx_configuration - add support for the protected_file.content_hash property (#28532)
• azurerm_palo_alto_next_generation_firewall_virtual_hub_local_rulestack - add support for the marketplace_offer_id and plan_id properties (#28537)
• azurerm_palo_alto_next_generation_firewall_virtual_hub_panorama - add support for the marketplace_offer_id and plan_id properties (#28537)
• azurerm_palo_alto_next_generation_firewall_virtual_network_local_rulestack - add support for the marketplace_offer_id and plan_id properties (#28537)
• azurerm_palo_alto_next_generation_firewall_virtual_network_panorama - add support for the marketplace_offer_id and plan_id properties (#28537)
• azurerm_route_server - add support for the hub_routing_preference property (#28363)

BUG FIXES:

• azurerm_logic_app_action_http - fix issue where queries would be set to an empty map instead of null when omitted from the configuration (#28447)
• azurerm_machine_learning_compute_cluster - allow resource creation when node_public_ip_enabled is false and subnet_resource_id has not been specified (#28673)
• azurerm_network_watcher_flow_log - prevent panic when removing the traffic_analytics block (#28416)
• azurerm_oracle_autonomous_database - fix incorrect type for the supported_regions_to_clone_to property (#28536)

v4.17.0

FEATURES:

• New Data Source: azurerm_api_management_subscription (#27824)
• New Resource: azurerm_cognitive_account_rai_policy (#28013)
• New Resource: azurerm_mssql_job_target_group (#28492)

ENHANCEMENTS:

• dependencies: network - update to use 2024-05-01 (#28146)
• dependencies: privatedns - update to use 2024-06-01 (#28599)
• dependencies: storage - update to use 2023-05-01 (#27760)
• Data Source: azure_communication_service - add support for the hostname property (#28620)
• azurerm_api_management - capacity now has a max limit of 50 (#28648)
• azurerm_backup_protected_vm - add support for feature vm_backup_suspend_protection_and_retain_data_on_destroy (#27950)
• azurerm_cognitive_account - support for the bypass property (#28221)
• azure_communication_service - add support for the hostname property (#28620)
• azurerm_container_app_environment - add support for Azure Monitor as a log destination (#26047)
• azurerm_mssql_elasticpool- add support for MOPRMS pool type and update validation for PRMS and Gen5 pool types (#28453)
• azurerm_mssql_managed_instance_transparent_data_encryption - support for the managed_hsm_key_id property (#28480)
• azurerm_stream_analytics_output_cosmosdb - support for the authentication_mode property (#28372)
• azurerm_stream_analytics_stream_input_blob - add support for authentication_mode (#27853)

BUG FIXES:

• azurerm_container_app - update the validation regex for the resource's name (#28528)
• azurerm_kubernetes_cluster - parse oms_agent.log_analytics_workspace_id insensitively to handle inconsistent casing (#28575)
• azurerm_kubernetes_flux_configuration - fix issue where removing post_build from a kustomization resulted in an error from the API (#28590)
• azurerm_linux_virtual_machine_scale_set - prevent crash caused by ommited extensions_to_provision_after_vm_creation block (#28549)
• azurerm_log_analytics_storage_insights - use subscription from workspace ID when building the resource ID (#28469)
• azurerm_orchestrated_virtual_machine_scale_set - prevent crash caused by ommited extensions_to_provision_after_vm_creation block (#28549)
• azurerm_virtual_machine - parse os_disk insensitively to handle inconsistent casing (#28592)
• azurerm_windows_virtual_machine_scale_set - Prevent crash caused by ommited extensions_to_provision_after_vm_creation block (#28549)

v4.16.0

NOTE: This release contains a breaking change reverting redisenterprise API version from 2024-10-01 to 2024-06-01-preview as not all regions are currently supported in the 2024-10-01 version

BREAKING CHANGES:

• dependencies - redisenterprise API version reverted from 2024-10-01 to 2024-06-01-preview (#28516)

FEATURES:

• New Resource: azurerm_container_registry_credential_set (#27528)
• New Resource: azurerm_mssql_job (#28456)
• New Resource: azurerm_mssql_job_schedule (#28456)

ENHANCEMENTS:

• dependencies - update hashicorp/go-azure-sdk to v0.20250115.1141151 (#28519)
• dependencies - costmanagement update to use 2023-08-01 (#27680)
• dependencies - postgresql update API version to 2024-08-01 (#28474)
• azurerm_container_app – support for the termination_grace_period_seconds property (#28307)
• azurerm_cost_anomaly_alert - add support for the notification_email property (#27680)
• azurerm_data_protection_backup_vault - support for immutability property (#27859)
• azurerm_databricks_workspace - fix ignore_changes support (#28527)
• azurerm_kubernetes_cluster_node_pool - add support for the temporary_name_for_rotation property to allow node pool rotation (#27791)
• azurerm_linux_function_app - add support for node 22 and java 17 support for JBOSSEAP (#28472)
• azurerm_linux_web_app - add support for node 22 and java 17 support for JBOSSEAP (#28472)
• azurerm_windows_function_app - add support for node 22 and java 17 support for JBOSSEAP (#28472)

BUG FIXES:

• azurerm_logic_app_standard - fix setting public_network_access for conflicting API properties (#28465)
• azurerm_redis_cache - data_persistence_authentication_method can now be unset (#27932)
• azurerm_mssql_database - fix bug where verifying TDE might fail to return an error on failure (#28505)
• azurerm_mssql_database - fix several potential bugs where retry functions could return false negatives for actual errors (#28505)
• azurerm_private_endpoint - fix a bug where reading Private DNS could error and exit the Read of the resource early without raising an error (#28505)

v4.15.0

FEATURES:

• New Data Source: azurerm_kubernetes_fleet_manager (#28278)
• New Resource: azurerm_arc_kubernetes_provisioned_cluster (#28216)
• New Resource: azurerm_machine_learning_workspace_network_outbound_rule_private_endpoint (#27874)
• New Resource azurerm_machine_learning_workspace_network_outbound_rule_service_tag (#27931)
• New Resource azurerm_dynatrace_tag_rules (#27985)

ENHANCEMENTS:

• dependencies - update tool Go version and bump go-git version to 5.13.0 (#28425)
• dependencies - update hashicorp/go-azure-sdk to v0.20241212.1154051 (#28360)
• dependencies - frontdoor - partial update to use 2024-02-01 API (#28233)
• dependencies - postgresql - update to 2024-08-01 (#28380)
• dependencies - redisenterprise - update to 2024-10-01 and support for new skus (#28280)
• Data Source: azurerm_healthcare_dicom_service - add support for the data_partitions_enabled, cors, encryption_key_url and storage properties (#27375)
• Data Source: azurerm_nginx_deployment - add support for the dataplane_api_endpoint property (#28379)
• Data Source: azurerm_static_web_app - add support for the repository_url and repository_branch properties (#27401)
• azurerm_billing_account_cost_management_export - add support for the file_format property (#27122)
• azurerm_cdn_frontdoor_profile - add support for the identity property (#28281)
• azurerm_cognitive_deployment - DataZoneProvisionedManaged and GlobalProvisionedManaged skus are now supported (#28404)
• azurerm_databricks_access_connector - SystemAssigned,UserAssigned identity is now supported (#28442)
• azurerm_healthcare_dicom_service - add support for the data_partitions_enabled, cors, encryption_key_url and storage properties (#27375)
• azurerm_kubernetes_flux_configuration - add support for the post_build and wait properties (#25695)
• azurerm_linux_virtual_machine - export the os_disk.0.id attribute (#28352)
• azurerm_netapp_volume - make the network_features property Optional/Computed (#28390)
• azurerm_nginx_deployment - add support for the dataplane_api_endpoint property (#28379)
• azurerm_resource_group_cost_management_export - add support for the file_format property (#27122)
• azurerm_site_recovery_replicated_vm - support for the network_interface.recovery_load_balancer_backend_address_pool_ids property (#28398)
• azurerm_static_web_app - add support for the repository_url, repository_branch and repository_token properties (#27401)
• azurerm_subscription_cost_management_export - add support for the file_format property (#27122)
• azurerm_virtual_network - support for the private_endpoint_vnet_policies property (#27830)
• azurerm_windows_virtual_machine - export the os_disk.0.id attribute (#28352)
• azurerm_mssql_managed_instance - support for new property azure_active_directory_administrator (#24801)

BUG FIXES:

• azurerm_api_management - update the capacity property to allow increasing the apim scalability to 31 (#28427)
• azurerm_automation_software_update_configuration remove deprecated misspelled attribute error_meesage (#28312)
• azurerm_batch_pool - support for new block security_profile (#28069)
• azurerm_log_analytics_data_export_rule - now creates successfully without returning 404 (#27876)
• azurerm_mongo_cluster - remove CustomizeDiff logic for administrator_password to allow the input to be generated by the random_password resource (#28215)
• azurerm_mongo_cluster - valdation updated so the resource now creates successfully when using create_mode GeoReplica (#28269)
• azurerm_mssql_managed_instance - allow system and user assigned identities, fix update failure (#28319)
• azurerm_storage_account - fix error handling for static_website and queue_properties availability checks (#28279)

v4.14.0

BREAKING CHANGES:

• nginx - update api version to 2024-09-01-preview, this API no longer supports certain properties which have had to be deprecated in the provider for the upgrade (#27776)
• Data Source: azurerm_nginx_configuration - the protected_file.content property will not be populated and has been deprecated (#27776)
• Data Source: azurerm_nginx_deployment - the managed_resource_group property will not be populated and has been deprecated (#27776)
• azurerm_network_function_collector_policy - the API doesn't preserve the ordering of the ipfx_ingestion.source_resource_ids property causing non-empty plans after apply, this property's type has been changed from a list to a set to prevent Terraform from continually trying to recreate this resource. If this property is being referenced anywhere you will need to update your config to convert it to a list before referencing it (#27915)
• azurerm_nginx_deployment - the managed_resource_group property is no longer supported and has been deprecated (#27776)

FEATURES:

• New Resource: azurerm_cognitive_account_rai_blocklist (#28043)
• New Resource: azurerm_fabric_capacity (#28080)

ENHANCEMENTS:

• dependencies - update go-azure-sdk to v0.20241206.1180327 (#28211)
• nginx - update api version to 2024-11-01-preview (#28227)
• azurerm_linux_function_app - add support for preview value 21 for java_version (#26304)
• azurerm_linux_function_app_slot - support 1.3 for site_config.minimum_tls_version and site_config.scm_minimum_tls_version (#28016)
• azurerm_linux_web_app - add support for preview value 21 for java_version (#26304)
• azurerm_orchestrated_virtual_machine_scale_set - support hot patching for 2025-datacenter-azure-edition-core-smalldisk (#28160)
• azurerm_search_service - add support for the network_rule_bypass_option property (#28139)
• azurerm_windows_function_app - add support for preview value 21 for java_version (#26304)
• azurerm_windows_function_app_slot - support 1.3 for site_config.minimum_tls_version and site_config.scm_minimum_tls_version (#28016)
• azurerm_windows_virtual_machine - support hot patching for 2025-datacenter-azure-edition-core-smalldisk (#28160)
• azurerm_windows_web_app - add support for preview value 21 for java_version (#26304)

BUG FIXES:

• azurerm_management_group - fix regression where subscription ID can't be parsed correctly anymore (#28228)