CHANGELOG.md

3.14.0 (Unreleased)

FEATURES:

• New Resource: cloudflare_tunnel_route (#1572)

ENHANCEMENTS:

• resource/cloudflare_certificate_pack: add support for new option (wait_for_active_status) to block creation until certificate pack is active (#1567)
• resource/cloudflare_notification_policy: Add slo to notification policy filters (#1573)
• resource/cloudflare_teams_list: Add support for IP type (#1550)

BUG FIXES:

• cloudflare_tunnel_routes: Fix reads matching routers with larger CIDRs (#1581)
• resource/cloudflare_access_group: allow github access groups to be created without a list of teams (#1589)
• resource/cloudflare_logpush_job: make ownership challenge check for https not required (#1588)
• resource/cloudflare_tunnel_route: Fix importing resource (#1580)
• resource/cloudflare_zone: update plan identifier for professional rate plans (#1583)

3.13.0 (April 20th, 2022)

NOTES:

• resource/cloudflare_byo_ip_prefix: now requires an explicit account_id parameter instead of implicitly relying on client.AccountID (#1563)
• resource/cloudflare_ip_list: no longer sets client.AccountID internally for resources (#1563)
• resource/cloudflare_magic_firewall_ruleset: no longer sets client.AccountID internally for resources (#1563)
• resource/cloudflare_static_route: no longer sets client.AccountID internally for resources (#1563)
• resource/cloudflare_worker_cron_trigger: now requires an explicit account_id parameter instead of implicitly relying on client.AccountID (#1563)

ENHANCEMENTS:

• resource/cloudflare_custom_pages: add support for managed_challenge action (#1478)
• resource/cloudflare_ruleset: add support for rule logging (#1538)

3.12.2 (April 13th, 2022)

ENHANCEMENTS:

• resource/cloudflare_ruleset: Setting description to Optional to better reflect API requirements (#1556)

3.12.1 (April 9th, 2022)

BUG FIXES:

• resource/cloudflare_zone: don't get stuck in endless loop for partner zone rate plans (#1547)

3.12.0 (April 6th, 2022)

NOTES:

• resource/cloudflare_healthcheck: notification_suspended and notification_email_addresses attributes are being deprecated in favour of cloudflare_notification_policy resource instead. (#1529)

FEATURES:

• New Resource: cloudflare_access_bookmark (#1539)

ENHANCEMENTS:

• resource/cloudflare_access_application: Add service_auth_401_redirect field. (#1540)

BUG FIXES:

• resource/cloudflare_api_token: ignore ordering changes in permission_groups (#1545)
• resource/cloudflare_notification_policy: Fix unexpected crashes when using cloudflare_notification_policy with a filters attribute (#1542)
• resource/cloudflare_zone_dnssec: don't try to enable DNSSEC when state is "pending" (#1530)

3.11.0 (March 23rd, 2022)

NOTES:

• resource/cloudflare_origin_ca_certificate: requested_validity no longer decrements until the expires_on value but is now the amount of days the certificate was requested for. (#1502)

FEATURES:

• New Resource: cloudflare_teams_proxy_endpoint (#1517)
• New Resource: cloudflare_waiting_room_event (#1509)

ENHANCEMENTS:

• resource/cloudflare_page_rule: add support for actions.disable_zaraz (#1523)
• resource/cloudflare_ruleset: add support for action_parameters.response to control the response when triggering a WAF rule (#1507)
• resource/cloudflare_ruleset: add support for ratelimit.requests_to_origin (#1507)

BUG FIXES:

• resource/cloudflare_device_posture_integration: remove superfluous id from schema (#1504)
• resource/cloudflare_spectrum_application: Fix 'edge_ip_connectivity' state persistence (#1515)

3.10.1 (March 10th, 2022)

BUG FIXES:

• resource/cloudflare_ruleset: don't attempt to upgrade ratelimit if it isn't set (#1501)

3.10.0 (March 9th, 2022)

BREAKING CHANGES:

• resource/cloudflare_ruleset: rename mitigation_expression to counting_expression (#1477)

ENHANCEMENTS:

• resource/cloudflare_access_rule: add support for managed_challenge action (#1457)
• resource/cloudflare_custom_hostname: adds support for custom_origin_sni (#1482)
• resource/cloudflare_device_policy_certificates: add support for device policy certificate settings (#1467)
• resource/cloudflare_teams_rules: Add insecure_disable_dnssec_validation option to settings (#1469)
• resource/cloudflare_zone: add support for partner rate plans (#1464)

BUG FIXES:

• resource/cloudflare_record: no need to pass the resourceCloudflareRecordUpdate to the NonRetryable handler (#1496)

3.9.1 (February 15th, 2022)

NOTES:

• resource/cloudflare_api_token: revert swap from TypeList to TypeSet due to broken migration (#1455)

FEATURES:

• New Data Source: cloudflare_devices (#1453)

3.9.0 (February 14th, 2022)

FEATURES:

• New Resource: cloudflare_gre_tunnel (#1423)
• New Resource: cloudflare_zone_cache_variants (#1444)

ENHANCEMENTS:

• cloudflare_ruleset: add support for "managed_challenge" action (#1442)
• resource/certificate_pack: adds validation_errors and validation_records with same format as custom hostnames. (#1424)
• resource/custom_hostname: also adds missing validation_errors, and certificate_authority (#1424)
• resource/custom_hostname: validation tokens are now an array (validation_records) instead of a top level, but the only top level record that was previously here was for cname validation, txt/http/email were entirely missing. (#1424)

BUG FIXES:

• cloudflare_argo_tunnel: conditionally fetch settings based on the provided configuration (#1451)
• resource/cloudflare_api_token: ignore ordering of permission_group IDs (#1425)

3.8.0 (January 28th, 2022)

FEATURES:

• New Resource: cloudflare_ipsec_tunnel (#1404)

ENHANCEMENTS:

• datasource/cloudflare_zones: allow filtering by account_id (#1401)
• resource/cloudflare_cloudflare_teams_rules: Add check_session and add_headers attributes to settings (#1402)
• resource/cloudflare_cloudflare_teams_rules: Add disable_download, disable_keyboard, and disable_upload attributes to BISOAdminControls (#1402)
• resource/cloudflare_logpush_job: add support for managing dns_logs (#1400)
• resource/cloudflare_ruleset: add skip support for products and phases (#1391)
• resource/cloudflare_ruleset: smoother handling of UI/API collisions during migrations (#1393)
• resource/cloudflare_teams_accounts: Add the fips field for configuring FIPS-compliant TLS. (#1380)

BUG FIXES:

• resource/cloudflare_fallback_domain: default entries are now restored on delete. (#1399)
• resource/cloudflare_ruleset: conditionally set action parameter "version" (#1388)
• resource/cloudflare_ruleset: fix handling of false values for category/rule overrides (#1405)

3.7.0 (January 13th, 2022)

FEATURES:

• New Resource: cloudflare_device_posture_integration (#1340)
• New Resource: cloudflare_fallback_domain (#1356)

ENHANCEMENTS:

• resource/cloudflare_firewall_rule: add support for managed_challenge action (#1378)
• resource/cloudflare_load_balancer_monitor: added support for smtp, icmp_ping, and udp_icmp monitors (#1371)
• resource/cloudflare_logpush_job: add support for account-level logpush jobs (#1311)
• resource/cloudflare_logpush_ownership_challenge: add support for account-level logpush ownership challenges (#1311)

BUG FIXES:

• resource/cloudflare_api_token: modified_on is now read correctly (#1368)

DEPENDENCIES:

• github.com/cloudflare/cloudflare-go v0.29.0 => v0.30.0 (#1379)

3.6.0 (December 23rd, 2021)

ENHANCEMENTS:

• resource/cloudflare_access_application: add bookmark type to apptypes (#1343)
• resource/cloudflare_teams_rules: GATE-2273: Adds support for device posture gateway rules (#1353)

BUG FIXES:

• resource/cloudflare_load_balancer: handle empty rules for resourceCloudflareLoadBalancerStateUpgradeV1 (#1257)
• resource/cloudflare_split_tunnel: import will now use correct import function (#1345)

3.5.0 (December 14th, 2021)

NOTES:

• provider: split schema definition from resource CRUD operations (#1321)

FEATURES:

• New Data Source: cloudflare_access_identity_provider (#1300)

ENHANCEMENTS:

• resource/cloudflare_access_application: add support for app_launcher_visible to the schema (#1303)
• resource/cloudflare_ruleset: add support for rewriting HTTP response headers (#1339)
• resource/cloudflare_zone: support changing type values (#1301)

BUG FIXES:

• resource/cloudflare_access_group: fix mapping error for AzureAD (#1341)
• resource/cloudflare_access_rule: allow "ip6" to be a padded or unpadded value and compare correctly (#1294)
• resource/cloudflare_argo: call Read for Import operations (#1295)
• resource/cloudflare_argo_tunnel: fix import mechanism (#1329)
• resource/cloudflare_argo_tunnel: update CNAME to use cfargotunnel.com (#1293)
• resource/cloudflare_origin_ca_certificate: reintroduce DiffSuppressFunc for requested_validity changes to handle all schema/SDK combinations (#1289)
• resource/cloudflare_split_tunnel: import now works by specifying accountId/mode (#1313)
• resource/cloudflare_teams_list: ignore items ordering (#1338)

3.4.0 (November 1st, 2021)

ENHANCEMENTS:

• provider: add the ability to configure a different hostname and base path for the API client (#1270)
• resource/cloudflare_access_application: add support for 'skip_interstitial' and 'logo_url' properties (#1262)
• resource/cloudflare_custom_hostname: add settings.early_hints to ssl schema (#1286)
• resource/cloudflare_ruleset: add support for exposed credential checks (#1263)
• resource/cloudflare_zone_setting_override: add support for overriding early_hints (#1285)

BUG FIXES:

• resource/cloudflare_ruleset: allow action parameter override enabled to be true/false or uninitialised (#1275)
• resource/cloudflare_ruleset: allow setting uri and path action parmeters together in a single rule (#1271)

3.3.0 (October 20th, 2021)

FEATURES:

• New Data Source: cloudflare_account_roles (#1238)

ENHANCEMENTS:

• resource/cloudflare_access_application: add support for 'SameSite' and 'HttpOnly' cookie attributes (#1241)
• resource/cloudflare_argo_tunnel: add cname as exported attribute (#1259)
• resource/cloudflare_load_balancer_pool: add support for origin steering (#1240)
• resource/cloudflare_ruleset: add support for 'Action' and 'Enabled' action_parameters > overrides attributes (#1249)
• resource/cloudflare_zone_setting_override: add support for overriding binary_ast (#1261)
• resource/cloudflare_zone_setting_override: add support for overriding filter_logs_to_cloudflare (#1261)
• resource/cloudflare_zone_setting_override: add support for overriding log_to_cloudflare (#1261)
• resource/cloudflare_zone_setting_override: add support for overriding orange_to_orange (#1261)
• resource/cloudflare_zone_setting_override: add support for overriding proxy_read_timeout (#1261)
• resource/cloudflare_zone_setting_override: add support for overriding visitor_ip (#1261)

BUG FIXES:

• resource/cloudflare_access_policy: handle empty nil values for building policies (#1237)
• resource/cloudflare_ruleset: don't attempt to update "custom" rulesets using the phase entrypoint (#1245)

3.2.0 (October 7th, 2021)

NOTES:

• provider: cloudflare-go has been upgraded to v0.25.0 (#1236)

FEATURES:

• New Data Source: cloudflare_zone (#1213)
• New Resource: cloudflare_split_tunnel (#1207)

ENHANCEMENTS:

• provider: add support for debugging via debuggers (like delve) (#1217)
• resource/cloudflare_access_policy: add support for approval_required flag (#1230)

BUG FIXES:

• resource/cloudflare_account_member: handle role changes made in the dashboard (#1202)
• resource/cloudflare_origin_ca_certificate: ignore requested_validity changes due to the value decreasing but still store it (#1214)
• resource/cloudflare_record: handle Updates for records with data blocks (#1229)

3.1.0 (September 21st, 2021)

ENHANCEMENTS:

• resource/cloudflare_ruleset: add support for ddos_l7 configuration (#1212)

3.0.1 (September 21st, 2021)

ENHANCEMENTS:

• resource/cloudflare_access_rule: add state migrator for 3.x (#1211)
• resource/cloudflare_custom_ssl: add state migrator for 3.x (#1211)
• resource/cloudflare_load_balancer: add state migrator for 3.x (#1211)
• resource/cloudflare_record: add state migrator for 3.x (#1211)

3.0.0 (September 20th, 2021)

2.x to 3.x upgrade guide

BREAKING CHANGES:

• resource/cloudflare_access_rule: configuration is now a TypeList instead of a TypeMap (#1188)
• resource/cloudflare_custom_ssl: custom_ssl_options is now a TypeList instead of TypeMap (#1188)
• resource/cloudflare_load_balancer: fixed_response is now a TypeList instead of a TypeMap (#1188)
• resource/cloudflare_load_balancer: fixed_response.status_codeis now aTypeIntinstead of aTypeString` (#1188)
• resource/cloudflare_record: data is now a TypeList instead of a TypeMap (#1188)

NOTES:

• provider: Golang version has been upgraded to 1.17 (#1188)
• provider: HTTP user agent is now "terraform/:version terraform-plugin-sdk/:version terraform-provider-cloudflare/:version" (#1188)
• provider: Minimum Terraform core version is now 0.14 (#1188)
• provider: terraform-plugin-sdk has been upgraded to 2.x (#1188)

ENHANCEMENTS:

• resource/cloudflare_custom_hostname: settings.ciphers is now a TypeSet internally to handle suppress ordering changes. Schema representation remains the same (#1188)
• resource/cloudflare_custom_hostname: settings is now Optional/Computed to reflect the stricter schema validation introduced in terraform-plugin-sdk v2 (#1188)
• resource/cloudflare_custom_hostname: status is now Computed as the value isn't managed by an end user (#1188)

2.27.0 (September 20th, 2021)

NOTES:

• provider: Update to cloudflare-go v0.22.0 (#1184)

FEATURES:

• New Resource: cloudflare_access_keys_configuration (#1186)
• New Resource: cloudflare_teams_account (#1173)
• New Resource: cloudflare_teams_rule (#1173)

ENHANCEMENTS:

• resource/cloudflare_access_policy: add support for purpose justification and approvals (#1199)
• resource/cloudflare_ruleset: add support for HTTP rate limiting (#1179)
• resource/cloudflare_ruleset: add support for Transform Rules (#1169)
• resource/cloudflare_ruleset: add support for WAF payload logging (#1174)
• resource/cloudflare_ruleset: add support for more complex skip ruleset configurations (#1201)

BUG FIXES:

• resource/cloudflare_ruleset: fix state handling for terraform-plugin-sdk v2 (#1183)
• resource/cloudflare_zone_settings_override: remap zero_rtt => 0rtt for resource delete (#1175)

2.26.1 (August 30th, 2021)

Fixes

• resource/cloudflare_ruleset: Send a single payload for rules instead of many individual payloads to prevent overwriting previous rules (#1171)

2.26.0 (August 27th, 2021)

• New resource: cloudflare_notification_policy (#1138)
• New resource: cloudflare_notification_policy_webhooks (#1151)
• New resource: cloudflare_ruleset (#1143)
• New resource: cloudflare_teams_location (#1154)
• New datasource: cloudflare_origin_ca_root_certificate (#1158)

Improvements

• resource/cloudflare_waiting_room: Add support for json_response_enabled as an argument (#1122)

2.25.0 (August 4th, 2021)

Improvements

• resource/cloudflare_access_device_posture_rule: Add support for domain_joined, firewall, os_version, and disk_encryption (#1137)
• provider: bump cloudflare-go to v0.20.0 (#1146)

2.24.0 (July 19th, 2021)

Improvements

• resource/cloudflare_logpush_job: Add support for "nel_reports" as a dataset (#1122)
• resource/cloudflare_custom_hostname: Allow SSL options to be optional when not required (#1131)
• resource/cloudflare_access_identity_provider: Support optional Okta API token (#1119)
• resource/cloudflare_load_balancer_pool: Add support for load shedding (#1108)
• resource/cloudflare_load_balancer_pool: Add support for longitude and latitude (#1093)

Fixes

• resource/cloudflare_record: Use correct Import method on resource (#1116)
• resource/cloudflare_worker_cron_trigger: Account for deletion of scripts and force a refresh of triggers (#1121)
• resource/cloudflare_rate_limit: Handle origin_traffic missing from API response (#1125)
• resource/cloudflare_record: Support allow_overwrite for root records (#1129)

2.23.0 (June 30th, 2021)

• New resource: cloudflare_waiting_room (#1053)

Improvements

• datasource/cloudflare_waf_rules: Export default_mode as an attribute (#1079)

Fixes

• resource/cloudflare_access_application: Revert removal of schema changes causing existing applications unable to re-apply (#1118)

2.22.0 (June 25th, 2021)

• New resource: cloudflare_static_route (#1098)

Improvements

• resource/cloudflare_origin_ca: Ignore decreasing requested_validity (#1043)
• resource/waf_override: Allow rules to be optional (#1090)
• resource/cloudflare_zone: Don't attempt to set free zone rate plans as that is already the default (#1102)
• resource/cloudflare_access_application: Ability to set type for Applications (#1076)
• resource/cloudflare_zone_lockdown: Update documentation to show examples of multiple configurations (#1106)

2.21.0 (May 26th, 2021)

• New resource: cloudflare_device_posture_rule (#1058)
• New resource: cloudflare_teams_list (#1058)

Improvements

• provider: Update to terraform-plugin-sdk v1.17.1 (#1035, #1043)
• resource/cloudflare_logpush_job: Allow ownership_challenge to be optional to account for Datadog, Splunk or S3-Compatible endpoints (#1048)
• resource/cloudflare_access_group: Add support for login_method (#1066)
• resource/cloudflare_load_balancer: Add support for promixity based steering (#1072)
• resource/cloudflare_access_application: Prevent bad CORS configuration when credentials and all origins are permitted (#1073)
• resource/cloudflare_access_service_tokens: Allow configuration to manage automatic renewal when the threshold is crossed and Terraform operations are performed within the window (#1057)
• resource/cloudflare_load_balancer_pool: Allow support for Host header settings (#1042)

Fixes

• resource/cloudflare_access_policy: Allow empty slices in blocks when building policies (#1034)
• resource/cloudflare_load_balancer: Fix override attributes pop_pools and region_pools referencing incorrect values causing a panic (#1039)

2.20.0 (April 15th, 2021)

New resource: cloudflare_access_ca_certificate (#995)

Improvements

• resource/cloudflare_access_application: Improve documentation for Import usage (#1002)
• resource/cloudflare_logpush_job: Update documentation to reflect requirements for destination_conf to match across all uses (#1024)
• resource/cloudflare_custom_hostname_fallback: Better handle service lag when updating existing resources by attempting retries (#1014)
• resource/cloudflare_waf_group: Simplify error handling using inbuilt helpers (#1015)
• resource/cloudflare_waf_rule: Simplify error handling using inbuilt helpers (#1015)
• resource/cloudflare_waf_package: Simplify error handling using inbuilt helpers (#1015)
• resource/cloudflare_access_group: Add support for login_method (#1018)
• provider: Update to cloudflare-go v0.16.0 (#1018)
• provider: Update to terraform-plugin-sdk v1.16.1 (#1003)
• resource/cloudflare_load_balancer: Add support for rules (#1016)

2.19.2 (March 15th, 2021)

Fixes

• resource/cloudflare_record: Address regression from 2.19.1 by checking the API response instead of the schema output for Priority (#992)

2.19.1 (March 11th, 2021)

Fixes

• resource/cloudflare_record: Update Priority handling for MX parked records (#986)

2.19.0 (March 10th, 2021)

Fixes

• resource/cloudflare_access_group: Fix crash when constructing a GSuite group (#940)
• resource/cloudflare_access_policy: Make precedence required (#941)
• resource/cloudflare_access_group: Fix crash when constructing a SAML group (#948)
• resource/cloudflare_zone: Update Retry logic to look at an available field for passing conditions (#973)
• resource/cloudflare_page_rule: Allow ignoring/including all query string parameters for cache_key_fields (#975)

Improvements

• resource/cloudflare_access_policy: Enable zone and account level resources to be imported (#956)
• resource/cloudflare_origin_ca_certificate: Smoother import process with less recreation (#955)
• provider: Update internals to match cloudflare-go 0.14 for better error handling and context aware methods (#976)

2.18.0 (February 3rd, 2021)

• New Resource: cloudflare_argo_tunnel (#905)
• New Resource: cloudflare_worker_cron_trigger (#926)

Fixes

• datasource/cloudflare_zones: Pagination is now correctly handled internally and will return more than the single page of results (cloudflare/cloudflare-go#534).
• resource/cloudflare_access_policy: Correctly handle transforming API responses to schema (#917)
• resource/cloudflare_access_group: Correctly handle transforming API responses to schema (#918)
• resource/cloudflare_ip_list: Ensure account ID is persisted during Import (#916)

Improvements

• resource/cloudflare_access_application: Allow any session_duration that is time.ParseDuration compatible (#910)
• resource/cloudflare_rate_limit: Add the ability to configure match.response.headers in rate limits (#911)
• resource/cloudflare_access_rule: Validate IP masks within schema (#921)

2.17.0 (January 5th, 2021)

• New Resource: cloudflare_magic_firewall_ruleset (#884)

Fixes

• resource/cloudfare_api_token: Omitting conditions will no longer send empty arrays causing IP restriction issues and unusable tokens (#902)

2.16.0 (January 5th, 2021)

Improvements

• resource/cloudflare_access_application: Add support for custom_deny_message and custom_deny_url values (#895)
• resource/cloudflare_load_balancer_monitor: Add support for probe_zone for monitors (#903)

2.15.0 (December 29th, 2020)

Improvements

• resource/cloudflare_load_balancer: Add support for session_affinity_ttl (#882)
• resource/cloudflare_load_balancer: Add support for session_affinity_attributes (#883)

Fixes

• resource/cloudflare_page_rule: Fixed crash during update when using custom cache key (#894)

2.14.0 (November 26th, 2020)

• New Resource: cloudflare_api_token (#862)
• New Datasource: cloudflare_api_token_permission_groups (#862)
• New Resource: cloudflare_zone_dnssec (#852)
• New Datasource: cloudflare_zone_dnssec (#852)

Improvements

• resource/cloudflare_record: Add explicit fields for CAA records instead of relying on the map value (#866)
• resource/cloudflare_account_member: Swap schema role_ids to TypeSet to better handle internal ordering changes (#876)

Fixes

• datasource/cloudflare_waf_groups: Make d.Id() a consistent string value to prevent Terraform thinking it requires an update (#869)
• datasource/cloudflare_waf_packages: Make d.Id() a consistent string value to prevent Terraform thinking it requires an update (#869)
• datasource/cloudflare_waf_rules: Make d.Id() a consistent string value to prevent Terraform thinking it requires an update (#869)
• datasource/cloudflare_zones: Make d.Id() a consistent string value to prevent Terraform thinking it requires an update (#869)

2.13.2 (November 6th, 2020)

Fixes

• resource/cloudflare_filter: Remove schema based validation for filters (#863)

2.13.1 (November 5th, 2020)

Improvements

• resource/cloudflare_filter: Pass missing credential error through to end user (#860)

2.13.0 (November 5th, 2020)

Improvements

• datasource/cloudflare_ip_ranges: Add the ability to query china_ipv4_cidr_blocks and china_ipv6_cidr_blocks (#833)
• resource/cloudflare_filter: Improve validation of expressions using the schema (#848)

Fixes

• resource/cloudflare_page_rule: Set default for cache_key_fields.host.resolved to prevent panics (#832)
• resource/cloudflare_authenticated_origin_pulls: Fix off-by-one error check in Import (#832)
• resource/cloudflare_authenticated_origin_pulls_certificate: Fix off-by-one error check in Import (#832)

2.12.0 (October 22nd, 2020)

Improvements

• resource/cloudflare_certificate_pack: Swap internal representation of hosts to remove inconsistent ordering issues (#800)
• resource/cloudflare_logpush_job: Handle deletion outside of Terraform (#798)
• resource/cloudflare_access_group: Add support for geo conditionals (#803)
• resource/cloudflare_access_application: Add support for enable_binding_cookie (#802)
• resource/cloudflare_waf_rule: Improve documentation for mode (#824)
• datasource/cloudflare_waf_rule: Improve documentation for mode (#824)
• resource/cloudflare_access_application: Add support for zone-level routes to Access resources (#819)
• resource/cloudflare_access_group: Add support for zone-level routes to Access resources (#819)
• resource/cloudflare_access_identity_provider: Add support for zone-level routes to Access resources (#819)
• resource/cloudflare_access_policy: Add support for zone-level routes to Access resources (#819)

Fixes

• resource/cloudflare_custom_hostname_fallback_origin: Don't retry the "active" status of custom hostnames fallbacks (#818)
• resource/cloudflare_zone: Remove DiffSuppressFunc causing jump_start issues (#830)

2.11.0 (September 11th, 2020)

• New Resource: cloudflare_certificate_pack (#778)

Improvements

• resource/cloudflare_access_group: Add support for auth_method (#762)
• resource/cloudflare_access_group: De-duplicate blocks in groups by accepting lists instead (#739)
• resource/cloudflare_worker_script: Adds support for webassembly_binding (#780)
• resource/cloudflare_healthcheck: Retry hostname resolution errors when encountering "no such host" responses (#789)
• resource/cloudflare_access_application: Better validation for allowed methods and origin combinations to prevent getting state into an unrecoverable state (#793)

Fixes

• resource/cloudflare_healthcheck: Handle resource deletion outside of Terraform (#787)
• resource/cloudflare_custom_hostname: Ensure Import sets hostname to prevent recreation (#788)
• resource/cloudflare_ip_list: Handle resource deletion outside of Terraform (#794)
• resource/cloudflare_ip_list: Remove item.id from schema (#796)

2.10.1 (August 24th, 2020)

Fixes

• resource/cloudflare_access_application: Handle the zone_id => account_id move internally (#724)

2.10.0 (August 24th, 2020)

• New Resource: cloudflare_custom_hostname_origin_fallback (#757)
• New Resource: cloudflare_authenticated_origin_pulls (#749)
• New Resource: cloudflare_authenticated_origin_pulls_certificate (#749)
• New Resource: cloudflare_ip_list (#766)

Improvements

• resource/cloudflare_spectrum_application: Add support for port ranges (#745)
• resource/cloudflare_custom_hostname: Force creation of a new resource if the zone_id value changes (#761)
• resource/cloudflare_record: Retry record creation/update if the response includes an "already exists" exception for handling race conditions (#773)

Fixes

• resource/cloudflare_firewall_rule: Compare descriptions after converting unicode + HTML entities to prevent unnecessary diffs (#758)
• resource/cloudflare_filter: Compare descriptions after converting unicode + HTML entities to prevent unnecessary diffs (#758)

2.9.0 (July 30th, 2020)

• New Resource: cloudflare_custom_hostname (SSL for SaaS) (#746)

Improvements

• resource/access_application: Add support for allowed_idps and restricting which Identity Providers are associated with an Application (#734)
• resource/access_application: Add support for auto_redirect_to_identity (#730)
• resource/access_application: Add CORS support (#725)
• resource/cloudflare_custom_ssl: Allow geo_restrictions to be nil and not included in the request payload (#714)
• datasource/cloudflare_zones: Filtering is now performed on the server side and the name parameter is no longer a regex. Instead, name is a string to match on and match is a regex. See the website documentation for more examples and updated references (#708) in order to make your code compatible with this release.

2.8.0 (June 22, 2020)

• New Resource: cloudflare_waf_override (#691)

Improvements

• resource/cloudflare_argo: Allow tiered_caching and smart_routing to be toggled individually allowing for entitlement differences (#703)
• resource/cloudflare_page_rule: Add support for cache_ttl_by_status (#706)
• resource/cloudflare_worker_script: Add support for plain_text and secret_text bindings (#710)

Fixes

• resource/cloudflare_record: Update TestAccCloudflareRecord_LOC test asserted value to use less precise floats and match the API responses (#712)
• resource/cloudflare_record: Update TestAccCloudflareRecord_Basic test metadata attributes to match updated API payload (#713)

2.7.0 (May 20, 2020)

• New Resource: cloudflare_byo_ip_prefix (#671)
• New Resource: cloudflare_logpull_retention (#678)
• New Resource: cloudflare_healthcheck (#680)

Improvements:

• resource/cloudflare_worker_route: Improve documentation to mention using account_id for the underlying APIs (#669)
• resource/cloudflare_worker_script: Improve documentation to mention using account_id for the underlying APIs (#670)
• resource/cloudflare_load_balancer_pool: Improve documentation to mention notification_email accepts a comma delimited list of emails (#687)
• resource/cloudflare_page_rule: Add support for cache_key_fields Page Rule action (#662)

Fixes:

• resource/cloudflare_zone_settings_override: Fix regression where if you didn't have universal SSL settings defined, it would error when setting them (#663)
• resource/cloudflare_zone: Handle changing zone rate plan from "free" to "enterprise" (#668)
• resource/cloudflare_record: Update validation to allow PTR records (9a8fd43)

2.6.0 (April 22, 2020)

Improvements:

• resource/cloudflare_zone_settings_override: Add universal_ssl to control enablement of Universal SSL on a zone (#658)
• provider: API keys and API tokens are now validated to help differentiate incorrect usage before making API calls (#661)
• resource/cloudflare_logpush_job: Add support for "firewall_events" dataset parameter (#660)
• resource/cloudflare_logpush_job: Add support for "dataset" parameter (#649)
• resource/cloudflare_zone_settings_override: Remove edge_cache_ttl (#654)
• resource/cloudflare_access_group: Allow Access conditions for include/require/exclude to be used consistently between Access Groups and Access Policies (#646)

Fixes:

• resource/cloudflare_logpush_job: fix for strconv.Atoi: parsing "" error while creating Logpush job

2.5.1 (April 03, 2020)

Improvements:

• resource/cloudflare_zone_settings_override: Update image_resizing options to include "open" (#639)

Fixes:

• resource/cloudflare_access_group: Fixed misspelt Okta in JSON payload (cloudflare/cloudflare-go#440)

2.5.0 (March 27, 2020)

Improvements:

• resource/cloudflare_access_policy: Add support for service_token and any_valid_service_token (#612)
• resource/cloudflare_waf_group: Handle WAF group deletions in the API responses (#623)
• resource/cloudflare_waf_package: Handle WAF package deletions in the API responses (#623)
• resource/cloudflare_waf_rule: Handle WAF rule deletions in the API responses (#623)
• resource/cloudflare_access_policy: Add support for group (#626)
• resource/cloudflare_firewall_rule: Add support for bypassing specific products (#630)
• resource/cloudflare_spectrum_application: Add support for edge_ips, argo_smart_routing and edge_ip_connectivity (#631)
• resource/cloudflare_access_group: Add support for using external providers (gsuite, github, azure, okta, saml, mTLS certificate, common name ) (#633)

2.4.1 (March 12, 2020)

Improvements:

• resource/cloudflare_logpush_job: Support Import on the resource (#618)

Fixes:

• resource/cloudflare_record: Missing CAA in DNS validation (#619)

2.4.0 (March 09, 2020)

• New Resource: cloudflare_workers_kv (#595)
• New Resource: cloudflare_access_identity_provider (#597)

Improvements:

• resource/cloudflare_record: Stricter validation for record types (#610)
• resource/logpush_job: Add more verbose error handling (#564)
• resource/zone_settings_override: Update documentation for cache_level values (#606)
• resource/access_application: Add documentation for available attributes (#587)
• resource/cloudflare_firewall_rule: Add support for bypassing security configuration rules by URL (#568)
• resource/cloudflare_record_migrate: Use zone_id for state migration before attempting to use domain (#566)
• resource/cloudflare_load_balancer: Update session_affinity validation to allow "ip_cookie" (#573)
• datasource/ip_ranges: Update documentation to show 0.12 syntax (#617)

Fixes

• resource/zone_settings_override: Handle individual zone settings within Delete operations (#599)

2.3.0 (December 18, 2019)

• New Resource: cloudflare_origin_ca_certificate (#547)

Fixes:

• resource/cloudflare_zone_settings_override: Renamed 0rtt to zero_rtt to conform to HCL grammar requirements (#557)

Improvements:

• resource/cloudflare_access_rule: Add ip6 as valid option (#560)
• resource/cloudflare_spectrum_application: Swap proxy_protocol to string field with supporting enum values instead (#561)
• resource/cloudflare_waf_rule: Add package_id as valid option and export group_id (#552)

2.2.0 (December 05, 2019)

• New Resource: cloudflare_access_group (#510)
• New Resource: cloudflare_workers_kv_namespace (#443)

Improvements:

• resource/cloudflare_zone_settings_override: Add non_identity to allowed decision schema (#541)
• resource/cloudflare_zone_settings_override: Add support for 0rtt and http3 settings (#542)
• resource/cloudflare_load_balancer_monitor: Allow empty string for expected_body (#539)
• resource/cloudflare_worker_script: Add support for Worker KV Namespace Bindings (#544)
• data_source/waf_rules, resource/cloudflare_waf_rule, Support allowed modes for WAF Rules (#550)

Fixes:

• resource/cloudflare_spectrum_application: Spectrum origin_port is optional (#549)

2.1.0 (November 07, 2019)

• New datasource: cloudflare_waf_rules (#525)

Improvements:

• resource/cloudflare_zone: Expose verification_key for partial setups (#532)
• resource/cloudflare_worker_route: Enable API Tokens support from upstream cloudflare-go release

2.0.1 (October 22, 2019)

• New Resource: cloudflare_access_service_tokens (#521)
• New Resource: cloudflare_waf_package (#475)
• New Resource: cloudflare_waf_group (#476)
• New datasource: cloudflare_waf_groups (#508)
• New datasource: cloudflare_waf_packages (#509)

Fixes:

• resource/cloudflare_page_rule: Set h2_prioritization individually not via bulk endpoint (#493)
• resource/cloudflare_zone_settings_override: Set zone_id to prevent unnecessary re-creation of resources (#502)

Improvements:

• resource/cloudflare_spectrum_application: Add support for setting traffic_type (#481)
• resource/cloudflare_zone_settings_override: Update documentation with default values (#498)

Internals:

• Migrated to Terraform plugin SDK (#489)

2.0.0 (September 30, 2019)

Breaking changes:

• provider/cloudflare:
• renamed token to api_key
• renamed org_id to account_id
• removed use_org_from_zone, you need to explicitly specify account_id
• Environment variables:
• renamed CLOUDFLARE_TOKEN to CLOUDFLARE_API_TOKEN
• renamed CLOUDFLARE_ORG_ID to CLOUDFLARE_ACCOUNT_ID
• removed CLOUDFLARE_ORG_ZONE, you need to explicitly specify CLOUDFLARE_ACCOUNT_ID
• Changed the following resources to require Zone ID:
• cloudflare_access_rule
• cloudflare_filter
• cloudflare_firewall_rule
• cloudflare_load_balancer
• cloudflare_page_rule
• cloudflare_rate_limit
• cloudflare_record
• cloudflare_waf_rule
• cloudflare_worker_route"
• cloudflare_zone_lockdown
• cloudflare_zone_settings_override
• Workers single-script support removed

Please see Version 2 Upgrade Guide for details.

Improvements:

• cloudflare/resource_cloudflare_argo: Handle errors when fetching tiered caching + smart routing settings (#477)
• Various documentation updates for 0.12 syntax

1.18.1 (August 29, 2019)

Fixes:

• resource/cloudflare_load_balancer: Mark zone as Computed to allow deprecations (#462)
• resource/cloudflare_page_rule: Mark zone as Computed to allow deprecations (#462)
• resource/cloudflare_rate_limit: Mark zone as Computed to allow deprecations (#462)
• resource/cloudflare_waf_rule: Mark zone as Computed to allow deprecations (#462)
• resource/cloudflare_worker_route: Mark zone as Computed to allow deprecations (#462)
• resource/cloudflare_worker_script: Mark zone as Computed to allow deprecations (#462)
• resource/cloudflare_zone_lockdown: Mark zone as Computed to allow deprecations (#462)

1.18.0 (August 27, 2019)

Fixes:

• resource/cloudflare_page_rule: Fix a logic condition where setting edge_cache_ttl action but then not updating it in subsequent apply runs causes it to be blown away (#453)

Improvements:

• provider: You can now use API tokens to authenticate instead of user email and key (#450)
• resource/cloudflare_zone_lockdown: priority can now be set on the resource (#445)
• resource/cloudflare_custom_ssl: Updated website documentation navigation to include link for resource (#442))

Deprecations:

• resource/cloudflare_access_rule: zone has been superseded by using zone_id (#452)
• resource/cloudflare_filter: zone has been superseded by using zone_id (#452)
• resource/cloudflare_firewall_rule: zone has been superseded by using zone_id (#452)
• resource/cloudflare_load_balancer: zone has been superseded by using zone_id (#452)
• resource/cloudflare_page_rule: zone has been superseded by using zone_id (#452)
• resource/cloudflare_rate_limit: zone has been superseded by using zone_id (#452)
• resource/cloudflare_waf_rule: zone has been superseded by using zone_id (#452)
• resource/cloudflare_worker_route: zone has been superseded by using zone_id (#452)
• resource/cloudflare_worker_script: zone has been superseded by using zone_id (#452)
• resource/cloudflare_zone_lockdown: zone has been superseded by using zone_id (#452)

1.17.1 (August 09, 2019)

Fixes:

• Partially revert [#421] deprecation messages

1.17.0 (August 09, 2019)

Removals:

• resource/cloudflare_zone_settings_override: sha1_support has been removed due to Cloudflare no longer supporting SHA1 certificates or the API endpoint (#415)

Deprecations:

• resource/cloudflare_zone_settings_override: tls_1_2_only has been superseded by using min_tls_version instead (#405)
• resource/cloudflare_access_rule: zone has been superseded by using zone_id (#421)
• resource/cloudflare_filter: zone has been superseded by using zone_id (#421)
• resource/cloudflare_firewall_rule: zone has been superseded by using zone_id (#421)
• resource/cloudflare_load_balancer: zone has been superseded by using zone_id (#421)
• resource/cloudflare_page_rule: zone has been superseded by using zone_id (#421)
• resource/cloudflare_rate_limit: zone has been superseded by using zone_id (#421)
• resource/cloudflare_waf_rule: zone has been superseded by using zone_id (#421)
• resource/cloudflare_worker_route: zone has been superseded by using zone_id (#421)
• resource/cloudflare_worker_script: zone has been superseded by using zone_id (#421)
• resource/cloudflare_zone_lockdown: zone has been superseded by using zone_id (#421)

Improvements:

• New Resource: cloudflare_custom_ssl (#418)
• resource/cloudflare_filter: Strip all surrounding whitespace from filter expressions to match API responses (#361)
• resource/cloudflare_zone: Support unicode zone name values (#412)
• resource/cloudflare_page_rule: Allow setting origin_pull for SSL (#430)
• resource/cloudflare_load_balancer_monitor: Add TCP support for load balancer monitor (#428)

Fixes:

• resource/cloudflare_logpush_job: Update documentation (#395)
• resource/cloudflare_zone_lockdown: Fix: examples in documentation (#407)
• resource/cloudflare_page_rule: Set nil on changed string-based Page Rule actions

1.16.1 (June 27, 2019)

Fixes:

• resource/cloudflare_page_rule: Fix regression in browser_cache_ttl where the value was sent as a string instead of an integer to the remote (#390)

1.16.0 (June 20, 2019)

Improvements:

• resource/cloudflare_zone_settings_override: Add support for h2_prioritization and image_resizing (#381)
• resource/cloudflare_load_balancer_pool: Update IP range for tests to not use reserved ranges (#369)

Fixes:

• resource/cloudflare_page_rule: Fix issues with browser_cache_ttl defaults and when value is 0 (for Enterprise users) (#379)

1.15.0 (May 24, 2019)

• The provider is now compatible with Terraform v0.12, while retaining compatibility with prior versions. (#309)

1.14.0 (May 15, 2019)

Improvements:

• New Resource: cloudflare_argo Manage Argo features (#304)
• cloudflare_zone: Support management of partial zones (#303)
• cloudflare_rate_limit: Update modes documentation (#293)
• cloudflare_load_balancer: Allow steering policy of "random" (#329)

Fixes:

• cloudflare_page_rule - Allow setting browser_cache_ttl to 0 (#293)
• cloudflare_page_rule - Swap to completely replacing rules (#338)

1.13.0 (April 12, 2019)

Improvements

• New Resource: cloudflare_logpush_job (#287)
• cloudflare_zone_settings - Remove option to toggle always_on_ddos (#253)
• cloudflare_page_rule - Update documentation to clarify "0" usage
• cloudflare_zones - Return zone ID and zone name (#275)
• cloudflare_load_balancer - Add enabled field (#208)
• cloudflare_record - validators: Allow PTR DNS records (#283)

Fixes:

• cloudflare_custom_pages - Use correct casing for zone_id lookups
• cloudflare_rate_limit - Make correlate optional and not flap in state management (#271)
• cloudflare_spectrum_application - Fixed integration tests to work (#275)
• cloudflare_page_rule - Better track field changes in actions resource. (#107)

1.12.0 (March 07, 2019)

Improvements:

• provider: Enable request/response logging (#212)
• resource/cloudflare_load_balancer_monitor: Add validation for port (#213)
• resource/cloudflare_load_balancer_monitor: Add allow_insecure and follow_redirects (#205)
• resource/cloudflare_page_rule: Updated available actions documentation to match what is available (#228)
• provider: Swap to using go modules for dependency management (#230)
• provider: Minimum Go version for development is now 1.11 (#230)

Fixes:

• resource/cloudflare_record: Read data back from API correctly (#217)
• resource/cloudflare_rate_limit: Read correlate back from API correctly (#204)
• resource/cloudflare_load_balancer_monitor: Fix incorrect type cast for port (#213)
• resource/cloudflare_load_balancer: Make steering_policy computed to avoid spurious diffs (#214)
• resource/cloudflare_load_balancer: Read session_affinity back from API to make import work & detects drifts (#214)

1.11.0 (January 11, 2019)

Improvements:

• New Resource: cloudflare_spectrum_app (#156)
• New Data Source: cloudflare_zones (#168)
• cloudflare_load_balancer_monitor - Add optional port parameter (#179)
• cloudflare_page_rule - Improved documentation for priority attribute (#182], missing explicit_cache_control [#185)
• cloudflare_rate_limit - Add challenge and js_challenge rate-limit modes (#172)

Fixes:

• cloudflare_page_rule - Page rule zone attribute change to trigger new resource (#183)

1.10.0 (December 18, 2018)

Improvements:

• cloudflare_zone_settings_override - Add opportunistic_onion zone setting support (#170)
• cloudflare_zone - Add ability to set zone plan (#160)

Fixes:

• cloudflare_zone - Allow zones to be properly imported (#157)
• cloudflare_access_policy - Match access_policy argument requisites with reality (#158)
• cloudflare_filter - Allow zone_id to set zone and vice versa (#162)
• cloudflare_firewall_rule - Allow zone_id to set zone and vice versa (#174)
• cloudflare_access_rule - Ensure zone and zone_id are always set (#175)
• Minor documentation fixes

1.9.0 (November 15, 2018)

Improvements:

• New Resource: cloudflare_access_application (#145)
• New Resource: cloudflare_access_policy (#145)
• cloudflare_load_balancer - Add steering policy support (#147)
• cloudflare_load_balancer - Support session_affinity (#153)
• cloudflare_load_balancer_pool - Support weight (#153)

Fixes:

• cloudflare_record - Compare name without the zone name (#151)
• Minor documentation fixes (#149] [#152)

1.8.0 (November 05, 2018)

Improvements:

• New Resource: cloudflare_zone (#58)
• New Resource: cloudflare_custom_pages (#132)
• cloudflare_zone_settings_override - Allow setting SSL level to Strict (SSL-Only Origin Pull) (#122)
• Update provider usage/build docs and how to update a dependency (#138)
• Improve Building The Provider instructions (#143)
• cloudflare_access_rule - Make importable for all rule types (#141)
• cloudflare_load_balancer_pool - Implement Update (#140)

Fixes:

• cloudflare_rate_limit - Documentation fixes for markdown where _ALL_ is italicized (#125)
• cloudflare_worker_route - Correctly set multi_script on Enterprise worker imports (#124)
• account_member - Ignore role ID ordering (#128)
• cloudflare_rate_limit - Origin traffic isn't default anymore (#130)
• cloudflare_rate_limit - Update rate limit validation to allow 1 (#129)
• cloudflare_record - Add validation to ensure TTL is not set while proxied is true (#127)
• Updated code for provider version in User-Agent
• cloudflare_zone_lockdown - Fix import of zone lockdowns (#135)

1.7.0 (October 09, 2018)

Improvements:

• New Resource: cloudflare_account_member (#78)

1.6.0 (October 05, 2018)

Improvements:

• New Resource: cloudflare_filter
• New Resource: cloudflare_firewall_rule

1.5.0 (September 21, 2018)

Improvements:

• New Resource: cloudflare_zone_lockdown (#115)

Fixes:

• Send User-Agent header with name and version when contacting API
• cloudflare_page_rule - Fix page rule polish (off, lossless or lossy) (#116)

1.4.0 (September 11, 2018)

Improvements:

• New Resource: cloudflare_worker_route (#110)
• New Resource: cloudflare_worker_script (#110)

1.3.0 (September 04, 2018)

Improvements:

• New Resource: cloudflare_access_rule (#64)

Fixes:

• cloudflare_zone_settings_override - Change Zone Settings Override to use GetOkExists (#107)

1.2.0 (August 13, 2018)

Improvements:

• New Resource: cloudflare_waf_rule (#98)
• cloudflare_zone_settings_override - Add off as Security Level setting (#99)
• resource_cloudflare_rate_limit - Add nat support (#96)
• resource_cloudflare_zone_settings_override - Add zrt as a value for the tls_1_3 setting (#106)
• Minor documentation improvements

Fixes:

• cloudflare_record - Setting a DNS record's proxied flag to false stopped working (#103)

1.1.0 (July 25, 2018)

FIXES:

• cloudflare_ip_ranges - IPv6 CIDR blocks should return IPv6 addresses (#51)
• cloudflare_zone_settings_override - Allow 0 for browser_cache_ttl (#71)
• cloudflare_page_rule - forwarding_urls in page rules are lists (#79)
• cloudflare_page_rule - The API supports active and disabled, not paused (#84)

IMPROVEMENTS:

• cloudflare_zone_settings_override - Add support for min_tls_version (#72)
• cloudflare_page_rule - Add support for more settings: bypass_cache_on_cookie, cache_by_device_type, cache_deception_armor, cache_on_cookie, host_header_override, polish, explicit_cache_control, origin_error_page_pass_thru, sort_query_string_for_cache, resolve_override, respect_strong_etag, response_buffering, true_client_ip_header, mirage, disable_railgun, cache_key, waf, rocket_loader, cname_flattening (#68], [#81], [#85)
• cloudflare_page_rule - Add off setting to security_level (#81)
• cloudflare_record - DNS Record improvements (#97)
• Various documentation improvements

1.0.0 (April 06, 2018)

BACKWARDS INCOMPATIBILITIES / NOTES:

• resource/cloudflare_record: Changing name or domain now force a recreation of the record (#29)

FEATURES:

• New Resource: cloudflare_rate_limit (#30)
• New Resource: cloudflare_page_rule (#38)
• New Resource: cloudflare_load_balancer (#40)
• New Resource: cloudflare_load_balancer_pool (#40)
• New Resource: cloudflare_zone_settings_override (#41)
• New Resource: cloudflare_load_balancer_monitor (#42)
• New Data Source: cloudflare_ip_ranges (#28)

IMPROVEMENTS:

• resource/cloudflare_record: Validate TXT records (#14)
• resource/cloudflare_record: Add data input to suppport SRV, LOC records (#29)
• resource/cloudflare_record: Add computed attributes created_on, modified_on, proxiable, and metadata to records (#29)
• resource/cloudflare_record: Support import of existing records (#36)
• New Provider configuration options for API rate limiting (#43)
• New Provider configuration options for using Organizations (#40)

0.1.0 (June 20, 2017)

NOTES:

• Same functionality as that of Terraform 0.9.8. Repacked as part of Provider Splitout