Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Terraform azurerm to v4.15.0 #943

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Dec 13, 2024

This PR contains the following updates:

Package Type Update Change
azurerm (source) required_provider minor 4.9.0 -> 4.15.0

Release Notes

hashicorp/terraform-provider-azurerm (azurerm)

v4.15.0

Compare Source

FEATURES:

  • New Data Source: azurerm_kubernetes_fleet_manager (#​28278)
  • New Resource: azurerm_arc_kubernetes_provisioned_cluster (#​28216)
  • New Resource: azurerm_machine_learning_workspace_network_outbound_rule_private_endpoint (#​27874)
  • New Resource azurerm_machine_learning_workspace_network_outbound_rule_service_tag (#​27931)
  • New Resource azurerm_dynatrace_tag_rules (#​27985)

ENHANCEMENTS:

  • dependencies - update tool Go version and bump go-git version to 5.13.0 (#​28425)
  • dependencies - update hashicorp/go-azure-sdk to v0.20241212.1154051 (#​28360)
  • dependencies - frontdoor - partial update to use 2024-02-01 API (#​28233)
  • dependencies - postgresql - update to 2024-08-01 (#​28380)
  • dependencies - redisenterprise - update to 2024-10-01 and support for new skus (#​28280)
  • Data Source: azurerm_healthcare_dicom_service - add support for the data_partitions_enabled, cors, encryption_key_url and storage properties (#​27375)
  • Data Source: azurerm_nginx_deployment - add support for the dataplane_api_endpoint property (#​28379)
  • Data Source: azurerm_static_web_app - add support for the repository_url and repository_branch properties (#​27401)
  • azurerm_billing_account_cost_management_export - add support for the file_format property (#​27122)
  • azurerm_cdn_frontdoor_profile - add support for the identity property (#​28281)
  • azurerm_cognitive_deployment - DataZoneProvisionedManaged and GlobalProvisionedManaged skus are now supported (#​28404)
  • azurerm_databricks_access_connector - SystemAssigned,UserAssigned identity is now supported (#​28442)
  • azurerm_healthcare_dicom_service - add support for the data_partitions_enabled, cors, encryption_key_url and storage properties (#​27375)
  • azurerm_kubernetes_flux_configuration - add support for the post_build and wait properties (#​25695)
  • azurerm_linux_virtual_machine - export the os_disk.0.id attribute (#​28352)
  • azurerm_netapp_volume - make the network_features property Optional/Computed (#​28390)
  • azurerm_nginx_deployment - add support for the dataplane_api_endpoint property (#​28379)
  • azurerm_resource_group_cost_management_export - add support for the file_format property (#​27122)
  • azurerm_site_recovery_replicated_vm - support for the network_interface.recovery_load_balancer_backend_address_pool_ids property (#​28398)
  • azurerm_static_web_app - add support for the repository_url, repository_branch and repository_token properties (#​27401)
  • azurerm_subscription_cost_management_export - add support for the file_format property (#​27122)
  • azurerm_virtual_network - support for the private_endpoint_vnet_policies property (#​27830)
  • azurerm_windows_virtual_machine - export the os_disk.0.id attribute (#​28352)
  • azurerm_mssql_managed_instance - support for new property azure_active_directory_administrator (#​24801)

BUG FIXES:

  • azurerm_api_management - update the capacity property to allow increasing the apim scalability to 31 (#​28427)
  • azurerm_automation_software_update_configuration remove deprecated misspelled attribute error_meesage (#​28312)
  • azurerm_batch_pool - support for new block security_profile (#​28069)
  • azurerm_log_analytics_data_export_rule - now creates successfully without returning 404 (#​27876)
  • azurerm_mongo_cluster - remove CustomizeDiff logic for administrator_password to allow the input to be generated by the random_password resource (#​28215)
  • azurerm_mongo_cluster - valdation updated so the resource now creates successfully when using create_mode GeoReplica (#​28269)
  • azurerm_mssql_managed_instance - allow system and user assigned identities, fix update failure (#​28319)
  • azurerm_storage_account - fix error handling for static_website and queue_properties availability checks (#​28279)

v4.14.0

Compare Source

BREAKING CHANGES:

  • nginx - update api version to 2024-09-01-preview, this API no longer supports certain properties which have had to be deprecated in the provider for the upgrade (#​27776)
  • Data Source: azurerm_nginx_configuration - the protected_file.content property will not be populated and has been deprecated (#​27776)
  • Data Source: azurerm_nginx_deployment - the managed_resource_group property will not be populated and has been deprecated (#​27776)
  • azurerm_network_function_collector_policy - the API doesn't preserve the ordering of the ipfx_ingestion.source_resource_ids property causing non-empty plans after apply, this property's type has been changed from a list to a set to prevent Terraform from continually trying to recreate this resource. If this property is being referenced anywhere you will need to update your config to convert it to a list before referencing it (#​27915)
  • azurerm_nginx_deployment - the managed_resource_group property is no longer supported and has been deprecated (#​27776)

FEATURES:

  • New Resource: azurerm_cognitive_account_rai_blocklist (#​28043)
  • New Resource: azurerm_fabric_capacity (#​28080)

ENHANCEMENTS:

  • dependencies - update go-azure-sdk to v0.20241206.1180327 (#​28211)
  • nginx - update api version to 2024-11-01-preview (#​28227)
  • azurerm_linux_function_app - add support for preview value 21 for java_version (#​26304)
  • azurerm_linux_function_app_slot - support 1.3 for site_config.minimum_tls_version and site_config.scm_minimum_tls_version (#​28016)
  • azurerm_linux_web_app - add support for preview value 21 for java_version (#​26304)
  • azurerm_orchestrated_virtual_machine_scale_set - support hot patching for 2025-datacenter-azure-edition-core-smalldisk (#​28160)
  • azurerm_search_service - add support for the network_rule_bypass_option property (#​28139)
  • azurerm_windows_function_app - add support for preview value 21 for java_version (#​26304)
  • azurerm_windows_function_app_slot - support 1.3 for site_config.minimum_tls_version and site_config.scm_minimum_tls_version (#​28016)
  • azurerm_windows_virtual_machine - support hot patching for 2025-datacenter-azure-edition-core-smalldisk (#​28160)
  • azurerm_windows_web_app - add support for preview value 21 for java_version (#​26304)

BUG FIXES:

  • azurerm_management_group - fix regression where subscription ID can't be parsed correctly anymore (#​28228)

v4.13.0

Compare Source

ENHANCEMENTS:

  • azurerm_cognitive_deployment - support for the dynamic_throttling_enabled property (#​28100)
  • azurerm_key_vault_managed_hardware_security_module_key - the key_type property now supports oct-HSM (#​28171)
  • azurerm_machine_learning_datastore_datalake_gen2 - can now be used with storage account in a different subscription (#​28123)
  • azurerm_network_watcher_flow_log - target_resource_id supports subnets and network interfaces (#​28177)

BUG:

  • Data Source: azurerm_logic_app_standard - update the identity property to support User Assigned Identities (#​28158)
  • azurerm_cdn_frontdoor_origin_group - update validation of the interval_in_seconds property to match API behaviour (#​28143)
  • azurerm_container_group - retrieve log analytics workspace key from config when updating resource (#​28025)
  • azurerm_mssql_elasticpool - fix sku tier and family validation that prevented the creation of Hyperscale PRMS pools (#​28178)
  • azurerm_search_service - the partition_count property can now be up to 3 when using basic sku (#​28105)

v4.12.0

Compare Source

FEATURES:

  • New Data Source: azurerm_mssql_managed_database (#​27026)

BUG FIXES:

  • azurerm_application_insights_api_key - fix condition that nil checks the list of available API keys to prevent an indefinate loop when keys created outside of Terraform are present (#​28037)
  • azurerm_data_factory_linked_service_azure_sql_database - send tenant_id only if it has been specified (#​28120)
  • azurerm_eventgrid_event_subscription - fix crash when flattening advanced_filter (#​28110)
  • azurerm_virtual_network_gateway - fix crash issue when specifying root_certificate or revoked_certificate (#​28099)

ENHANCEMENTS:

  • dependencies - update go-azure-sdk to v0.20241128.1112539 (#​28137)
  • containerapps - update api version to 2024-03-01 (#​28074)
  • Search - update api version to 2024-06-01-preview (#​27803)
  • Data Source: azurerm_logic_app_standard - add support for the public_network_access property (#​27913)
  • Data Source: azurerm_search_service - add support for the customer_managed_key_encryption_compliance_status property (#​27478)
  • azurerm_container_registry_task - add validation on cpu as well as on agent_pool_nameand agent_setting (#​28098)
  • azurerm_databricks_workspace - add support for the enhanced_security_compliance block (#​26606)
  • azurerm_eventhub - deprecate namespace_name and resource_group_name in favour of namespace_id (#​28055)
  • azurerm_logic_app_standard - add support for the public_network_access property (#​27913)
  • azurerm_search_service - add support for the customer_managed_key_encryption_compliance_status property (#​27478)
  • azurerm_cosmosdb_account - add support for value EnableNoSQLFullTextSearch in the capabilities.name property (#​28114)

v4.11.0

Compare Source

NOTES:

FEATURES:

  • New Ephemeral Resource: azurerm_key_vault_certificate (#​28083)
  • New Ephemeral Resource: azurerm_key_vault_secret (#​28083)
  • New Resource: azurerm_eventgrid_namespace (#​27682)

ENHANCEMENTS:

  • dependencies: update hashicorp/go-azure-sdk to v0.20241118.1115603 (#​28075)
  • batch - upgrade api version to 2024-07-01 (#​27982)
  • containerregistry - upgrade api version to 2023-11-01-preview (#​27983)
  • azurerm_application_gateway - 1.1 is now accepted as a valid rule_set_version in the waf_configuration block (#​28039)
  • azurerm_arc_machine - add support for the identity and tags properties (#​27987)
  • azurerm_container_app - secret.name now accepts up to 253 characters and . (#​27935)
  • azurerm_network_manager - scope_accesses now accepts Routing (#​28033)
  • azurerm_network_watcher_flow_log - add support for the target_resource_id property (#​26015)
  • azurerm_role_assignment - condition_version will be defaulted to 2.0 when condition has been set (#​27189)
  • azurerm_subnet - Informatica.DataManagement/organizations is a valid service_delegation (#​27993)
  • azurerm_virtual_network - Informatica.DataManagement/organizations is a valid service_delegation (#​27993)
  • azurerm_web_application_firewall_policy - 1.1 is now accepted as a valid version for Microsoft_BotManagerRuleSet rule types (#​28039)

BUG FIXES:

  • azurerm_api_management - public_ip_address_id is no longer required when zone has been set (#​27976)
  • azurerm_api_management_diagnostic - raise and error when operation_name_format is used with and identity that is not applicationinsights (#​27630)
  • azurerm_api_management_api_diagnostic - raise and error when operation_name_format is used with and identity that is not applicationinsights (#​27630)
  • azurerm_application_gateway - rewrite_rule_set can be supplied when using Basic sku (#​28011)
  • azurerm_container_registry_token_password - correctly mark as gone if container registry token doesn't exist (#​27232)
  • azurerm_kusto_cluster - allowed_fqdn and allowed_ip_ranges can now be set to empty lists (#​27529)
  • azurerm_linux_function_app_slot - create content settings when using a consumpton plan (#​25412)
  • azurerm_virtual_network_gatway - updating ip_configuration now recreates the resource (#​27828)

v4.10.0

Compare Source

BREAKING CHANGES:

  • dependencies - update cognitive to 2024-10-01, due to a behavioural change in this version of the API, the primary_access_key and secondary_access_key can not be retrieved if local_authentication_enabled has been set to false. These properties that may have had values previously will now be empty. This has affected the azurerm_ai_services and azurerm_cognitive_account resources as well as the azurerm_cognitive_account data source (#​27851)

FEATURES:

  • New Data Source: azurerm_key_vault_managed_hardware_security_module_key (#​27827)
  • New Resource: azurerm_netapp_backup_vault (#​27188)
  • New Resource: azurerm_netapp_backup_policy (#​27188)

ENHANCEMENTS:

  • dependencies: update terraform-plugin-framework to version v1.13.0 (#​27936)
  • dependencies: update terraform-plugin-framework-validators to version v0.14.0 (#​27936)
  • dependencies: update terraform-plugin-go to version v0.25.0 (#​27936)
  • dependencies: update terraform-plugin-mux to version v0.17.0 (#​27936)
  • dependencies: update terraform-plugin-sdk/v2 to version v2.35.0 (#​27936)
  • Data Source: azurerm_bastion_host - add support for the zones property (#​27909)
  • azurerm_application_gateway - support more values for the status_code property (#​27535)
  • azurerm_bastion_host - support for the zones property (#​27909)
  • azurerm_communication_service - support for usgov region (#​27919)
  • azurerm_email_communication_service - support for usgov region added (#​27919)
  • azurerm_linux_function_app - support for .NET 9 (#​27879)
  • azurerm_linux_function_app_slot - support for .NET 9 (#​27879)
  • azurerm_linux_web_app - support for .NET 9 (#​27879)
  • azurerm_linux_web_app_slot - support for .NET 9 (#​27879)
  • azurerm_windows_web_app - support for .NET 9 (#​27879)
  • azurerm_windows_web_app_slot - support for .NET 9 (#​27879)
  • azurerm_windows_function_app - support for .NET 9 (#​27879)
  • azurerm_windows_function_app_slot - support for .NET 9 (#​27879)

BUG FIXES:

  • azurerm_log_analytics_workspace_table - use the subscription from workspace ID (#​27590)
  • azurerm_traffic_manager_external_endpoint - the value for priority will be dynamically assigned by the API (#​27966)
  • azurerm_traffic_manager_azure_endpoint - the value for priority will be dynamically assigned by the API (#​27966)

Configuration

📅 Schedule: Branch creation - "after 7am and before 11am every weekday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner December 13, 2024 09:02
@renovate renovate bot added the dependencies Pull requests that update a dependency file label Dec 13, 2024
Copy link
Contributor

hmcts-jenkins-cnp bot commented Dec 13, 2024

Plan Result (stg)

Plan: 0 to add, 2 to change, 0 to destroy.
  • Update
    • module.finalsa_storage_account.azurerm_storage_account.storage_account
    • module.ingestsa_storage_account.azurerm_storage_account.storage_account
Change Result (Click me)
  # module.finalsa_storage_account.azurerm_storage_account.storage_account will be updated in-place
  ~ resource "azurerm_storage_account" "storage_account" {
        id                                 = "/subscriptions/74dacd4f-a248-45bb-a2f0-af700dc4cf68/resourceGroups/pre-stg/providers/Microsoft.Storage/storageAccounts/prefinalsastg"
        name                               = "prefinalsastg"
        tags                               = {
            "application"         = "pre-recorded-evidence"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/pre-shared-infrastructure.git"
            "businessArea"        = "Cross-Cutting"
            "contactSlackChannel" = "#dts-pre-rec-evidence-tech"
            "environment"         = "staging"
            "managedBy"           = "Pre Recorded Evidence"
        }
        # (96 unchanged attributes hidden)

      + network_rules {
          + bypass         = [
              + "AzureServices",
            ]
          + default_action = "Allow"
        }

        # (3 unchanged blocks hidden)
    }

  # module.ingestsa_storage_account.azurerm_storage_account.storage_account will be updated in-place
  ~ resource "azurerm_storage_account" "storage_account" {
        id                                 = "/subscriptions/74dacd4f-a248-45bb-a2f0-af700dc4cf68/resourceGroups/pre-stg/providers/Microsoft.Storage/storageAccounts/preingestsastg"
        name                               = "preingestsastg"
        tags                               = {
            "application"         = "pre-recorded-evidence"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/pre-shared-infrastructure.git"
            "businessArea"        = "Cross-Cutting"
            "contactSlackChannel" = "#dts-pre-rec-evidence-tech"
            "environment"         = "staging"
            "managedBy"           = "Pre Recorded Evidence"
        }
        # (96 unchanged attributes hidden)

      + network_rules {
          + bypass         = [
              + "AzureServices",
            ]
          + default_action = "Allow"
        }

        # (3 unchanged blocks hidden)
    }

Plan: 0 to add, 2 to change, 0 to destroy.

Copy link
Contributor

hmcts-jenkins-cnp bot commented Dec 13, 2024

Plan Result (prod)

Plan: 0 to add, 4 to change, 0 to destroy.
  • Update
    • azurerm_monitor_metric_alert.storage_ingest_alert_capacity[0]
    • module.finalsa_storage_account.azurerm_storage_account.storage_account
    • module.ingestsa_storage_account.azurerm_storage_account.storage_account
    • module.sa_storage_account.azurerm_storage_account.storage_account
Change Result (Click me)
  # azurerm_monitor_metric_alert.storage_ingest_alert_capacity[0] will be updated in-place
  ~ resource "azurerm_monitor_metric_alert" "storage_ingest_alert_capacity" {
        id                       = "/subscriptions/5ca62022-6aa2-4cee-aaa7-e7536c8d566c/resourceGroups/pre-prod/providers/Microsoft.Insights/metricAlerts/used_capacity"
        name                     = "used_capacity"
      ~ scopes                   = [
          - "/subscriptions/5ca62022-6aa2-4cee-aaa7-e7536c8d566c/resourceGroups/pre-prod/providers/Microsoft.Storage/storageAccounts/prefinalsaprod",
          + "/subscriptions/5ca62022-6aa2-4cee-aaa7-e7536c8d566c/resourceGroups/pre-prod/providers/Microsoft.Storage/storageAccounts/preingestsaprod",
        ]
        tags                     = {
            "application"         = "pre-recorded-evidence"
            "builtFrom"           = "https://github.com/HMCTS/pre-shared-infrastructure.git"
            "businessArea"        = "Cross-Cutting"
            "contactSlackChannel" = "#dts-pre-rec-evidence-tech"
            "environment"         = "production"
            "managedBy"           = "Pre Recorded Evidence"
        }
        # (9 unchanged attributes hidden)

        # (2 unchanged blocks hidden)
    }

  # module.finalsa_storage_account.azurerm_storage_account.storage_account will be updated in-place
  ~ resource "azurerm_storage_account" "storage_account" {
        id                                 = "/subscriptions/5ca62022-6aa2-4cee-aaa7-e7536c8d566c/resourceGroups/pre-prod/providers/Microsoft.Storage/storageAccounts/prefinalsaprod"
        name                               = "prefinalsaprod"
        tags                               = {
            "application"         = "pre-recorded-evidence"
            "builtFrom"           = "https://github.com/HMCTS/pre-shared-infrastructure.git"
            "businessArea"        = "Cross-Cutting"
            "contactSlackChannel" = "#dts-pre-rec-evidence-tech"
            "environment"         = "production"
            "managedBy"           = "Pre Recorded Evidence"
        }
        # (96 unchanged attributes hidden)

      + network_rules {
          + bypass         = [
              + "AzureServices",
            ]
          + default_action = "Allow"
        }

        # (3 unchanged blocks hidden)
    }

  # module.ingestsa_storage_account.azurerm_storage_account.storage_account will be updated in-place
  ~ resource "azurerm_storage_account" "storage_account" {
        id                                 = "/subscriptions/5ca62022-6aa2-4cee-aaa7-e7536c8d566c/resourceGroups/pre-prod/providers/Microsoft.Storage/storageAccounts/preingestsaprod"
        name                               = "preingestsaprod"
        tags                               = {
            "application"         = "pre-recorded-evidence"
            "builtFrom"           = "https://github.com/HMCTS/pre-shared-infrastructure.git"
            "businessArea"        = "Cross-Cutting"
            "contactSlackChannel" = "#dts-pre-rec-evidence-tech"
            "environment"         = "production"
            "managedBy"           = "Pre Recorded Evidence"
        }
        # (96 unchanged attributes hidden)

      + network_rules {
          + bypass         = [
              + "AzureServices",
            ]
          + default_action = "Allow"
        }

        # (3 unchanged blocks hidden)
    }

  # module.sa_storage_account.azurerm_storage_account.storage_account will be updated in-place
  ~ resource "azurerm_storage_account" "storage_account" {
        id                                 = "/subscriptions/5ca62022-6aa2-4cee-aaa7-e7536c8d566c/resourceGroups/pre-prod/providers/Microsoft.Storage/storageAccounts/presaprod"
        name                               = "presaprod"
        tags                               = {
            "application"         = "pre-recorded-evidence"
            "builtFrom"           = "https://github.com/HMCTS/pre-shared-infrastructure.git"
            "businessArea"        = "Cross-Cutting"
            "contactSlackChannel" = "#dts-pre-rec-evidence-tech"
            "environment"         = "production"
            "managedBy"           = "Pre Recorded Evidence"
        }
        # (96 unchanged attributes hidden)

      ~ network_rules {
          ~ ip_rules                   = [
              - "20.50.109.148",
            ]
            # (3 unchanged attributes hidden)
        }

        # (3 unchanged blocks hidden)
    }

Plan: 0 to add, 4 to change, 0 to destroy.

@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from 8f6971e to c121753 Compare January 10, 2025 12:16
@renovate renovate bot changed the title Update Terraform azurerm to v4.14.0 Update Terraform azurerm to v4.15.0 Jan 10, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file prod/add-or-update stg/add-or-update
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants